# WhatsApp identity theft and evolving digital fraud

> Live situation record from CLSTR: https://clstr.news/situations/whatsapp-identity-theft-targeting-public-figures
> Updated: 2026-09-11T09:58:03.000Z. Sources: 45. Developments: 6.

A series of identity theft attempts via WhatsApp has been reported involving public figures in South America. In Argentina, journalist Sergio Lapegüe alerted the public to a scam where an individual impersonated his daughter to claim her phone had broken. Colombian Senator Antonio José Correa Jiménez also reported impersonators using his name and official title to fraudulently manage administrative procedures. Law enforcement agencies in Spain, Colombia, Argentina, and Mexico have issued warnings regarding evolving fraud and extortion tactics. A prevalent method involves attackers gaining access to a user's account without logging them out, allowing criminals to send messages from the victim's real number to request urgent money transfers. In Spain, this has caused significant financial losses in regions such as Castilla y León, Madrid, and Navarra. Recent warnings from authorities in Spain, Italy, and Macau highlight increasingly sophisticated methods, including ‘zero-click’ attacks. These attacks, which particularly affect Apple devices running outdated iOS versions, allow criminals to compromise accounts without any user interaction. Once inside, scammers can coexist with the legitimate user to send fraudulent messages, often requesting approximately €1,000. In Spain, the Guardia Civil and National Police have specifically identified a surge in fraud in Huelva and Galicia. In Huelva, over 50 cases of ‘zero-click’ fraud were identified affecting iPhone users on iOS 16.7.12 or earlier. In Galicia, criminals have been reported impersonating victims to contact acquaintances via existing chat threads, often providing foreign bank details for urgent transfers. In Germany, authorities have identified variations where scammers use WhatsApp to impersonate known contacts to trick victims into clicking malicious links. These include fraudulent voting requests, such as messages regarding a girl named ‘Klara’ needing scholarship votes or fake Spotify podcast contests involving a purported collaboration between Spotify and Google.

## Claims

- Scammers are using fake business accounts to send fraudulent security alerts to WhatsApp users. (corroborated by 2 sources)
- Fraudulent messages claim accounts are ‘high-risk’ to pressure users into verifying their profiles. (corroborated by 2 sources)
- Clicking a ‘START’ button on fake security sites directs users to enter codes that allow scammers to hijack accounts. (corroborated by 2 sources)
- A new wave of zero-click attacks is targeting WhatsApp users. (single source)
- Zero-click attacks specifically target Apple devices running outdated versions of iOS and WhatsApp. (single source)
- Compromised accounts can be used to impersonate contacts and request emergency funds. (single source)

## Timeline

### 2026-09-11: Spanish authorities warn of rising WhatsApp fraud and zero-click attacks

Spanish police are warning of a rise in WhatsApp fraud in Huelva and Galicia, where attackers use “zero-click” methods and identity impersonation to solicit money from victims' contacts.

4 sources. https://clstr.news/cluster/spanish-authorities-warn-of-rising-whatsapp-fraud-and-zero-click-attacks

### 2026-09-09: WhatsApp users targeted by account takeover phishing scams

Fraudsters are using fake WhatsApp voting links for scholarships or Spotify contests to hijack user accounts by tricking victims into providing device linking codes.

6 sources. https://clstr.news/cluster/whatsapp-users-targeted-by-account-takeover-phishing-scams

### 2026-09-06: Cybersecurity authorities warn of rising WhatsApp and email fraud

Authorities in Germany and Portugal are warning against rising digital fraud, including WhatsApp impersonation scams, fake contest voting links, and deceptive emails using celebrity likenesses.

10 sources. https://clstr.news/cluster/cybersecurity-authorities-warn-of-rising-whatsapp-and-online-scams

### 2026-09-02: WhatsApp scams: Authorities warn of zero-click attacks and extortion

Police in multiple regions are warning of new WhatsApp scams, including zero-click account takeovers and extortion via single-view photos, targeting users with outdated software.

13 sources. https://clstr.news/cluster/whatsapp-identity-theft-scam-targets-users-in-spain

### 2026-08-31: WhatsApp fraud: Authorities warn of new identity theft and extortion tactics

Authorities in several countries are alerting users to new WhatsApp scams, including identity impersonation, account hijacking that allows simultaneous use, and extortion via the ‘view once’ photo feature.

9 sources. https://clstr.news/cluster/senator-antonio-jos-correa-reports-whatsapp-identity-theft

### 2026-08-23: Sergio Lapegüe alerts public to WhatsApp impersonation scam

Journalist Sergio Lapegüe alerted the public after a scammer attempted to defraud him by impersonating his daughter on WhatsApp using her photo and a fake phone number.

6 sources. https://clstr.news/cluster/sergio-lapege-reports-attempted-whatsapp-impersonation-scam

---
Cite as: WhatsApp identity theft and evolving digital fraud. CLSTR, https://clstr.news/situations/whatsapp-identity-theft-targeting-public-figures
