WhatsApp voting scam targets users in Spain

A new cyberattack involving a fraudulent WhatsApp voting scheme has been identified, targeting users by requesting votes for a supposed child in a dance competition. Using names such as ‘Eliska’ or ‘Sophie,’ scammers send links through the accounts of known contacts, making the messages appear legitimate.

When a user clicks the link, they are directed to a website that asks for their phone number and a code to ‘link a device.’ Entering this code allows criminals to link a new device to the victim's WhatsApp account, granting them full access to the session. Once linked, attackers can impersonate the victim, message their contacts, and request money while the victim continues to use the app normally.

Authorities, including the Guardia Civil, the National Police, and the OCU, have issued warnings. Experts advise that users should never enter codes provided by such websites. If a code has already been entered, users are urged to immediately check their ‘Linked Devices’ settings in WhatsApp to terminate any unrecognized sessions.