WhatsApp scams target users via fake voting contests and account hijacking

A widespread cyberattack is targeting WhatsApp users through a deceptive scheme known as ‘Ghost Pairing.’ Scammers use compromised accounts to send messages to the victim's contacts, requesting votes for a child named ‘Eliska’ or ‘Sophie’ in a fake ballet competition.

When users click the provided link to vote, they are directed to a fraudulent website that requests their phone number and a verification code. Entering this code does not cast a vote; instead, it authorizes a criminal to link a new device to the victim's WhatsApp account. This allows attackers to send messages from the victim's actual account, often requesting urgent money transfers of approximately 980 euros from friends and family.

Security experts and agencies, including Incibe, have noted that this method is particularly effective because the messages appear to come from trusted contacts. Other reported fraud modalities include ‘smishing’ via SMS, phishing through fake digital subscription updates, and the use of artificial intelligence to create realistic but fraudulent online shopping profiles.