WhatsApp phishing scam uses fake voting requests to hijack accounts

Cybercriminals are utilizing a phishing tactic known as ‘Ghost Pairing’ to hijack WhatsApp accounts. The scam typically begins with a message from a seemingly trusted contact asking the recipient to vote for someone, such as a dancer, in a competition.

Upon clicking a provided link, victims are directed to a fraudulent website designed to look like a legitimate platform. The site prompts users to enter their phone number or scan a QR code. This process is actually an attempt to misuse WhatsApp’s device linking feature, allowing attackers to gain full access to the victim's account.

Once an account is compromised, criminals use it to contact the victim's friends and family to conduct further scams. These often involve urgent requests for money, such as claims of unpaid medical bills. Authorities, including the German Federal Office for Information Security (BSI) and the Austrian Institute for Applied Telecommunications (ÖIAT), advise users never to share WhatsApp confirmation codes or scan unexpected QR codes.