Blog/WhatsApp & mobile money

Customer Service on WhatsApp Without Exposing Customers

Businesses serving customers on WhatsApp can teach them good habits or accidentally train them to fall for scams. What to ask, what never to request, and how to verify customers.

CyberWatch AI3 October 2026 · 2 min read
Two smiling cafe staff behind a counter

Every time a business asks a customer for a PIN, a card number or a photo of their ID in a chat, it teaches that customer that such requests are normal. Scammers then make the same request, and customers comply. Good customer service on WhatsApp protects customers by setting clear, safe expectations.

Never ask customers for

  • Passwords, PINs or one-time codes.
  • Full card numbers or card security codes.
  • Photos of ID documents in chat, unless legally required and handled securely. See ID documents on WhatsApp.
  • Screen sharing or remote access. See screen sharing scams.

Safer ways to verify and serve

  • Use order or booking references.
  • Call back on the number on the customer's account.
  • Send payments through your payment provider's secure links, and describe what they look like.
  • Keep only the data you need, and delete chats you no longer need to keep.

Say it in your greeting message: "We will never ask for your PIN, password or codes, and we never change our bank details by message."

Protect the account itself

See WhatsApp Business security and, if someone copies your profile, business impersonation.

For more, see our guide to WhatsApp scams.

Frequently asked questions

How do I verify a customer on WhatsApp without asking for sensitive data?

Use order numbers, booking references or a callback to the number on file, rather than full card numbers, PINs or ID photos.

Can we take payments through WhatsApp?

Use a secure payment link from your payment provider or an official payment method, and tell customers exactly what your links look like.

What should we tell customers?

Your official number, what you will never ask for, and how to check a message really came from you.

Sources

  1. About Business Features, WhatsApp Help Center
  2. About verified business accounts, WhatsApp Help Center
  3. Cybersecurity for Small Business, US Federal Trade Commission
Share this article
LinkedIn WhatsApp X
For organizations

Your people get these messages at work too.

CyberWatch AI sends your staff realistic practice attacks, trains the gaps it finds, and shows management exactly where the organization stands.