Phishing Links in WhatsApp Messages
Links in WhatsApp chats lead to fake bank pages, fake delivery sites and fake WhatsApp logins. How phishing links are disguised in chats and what to check before you tap.
Phishing is not only an email problem. On WhatsApp, links arrive from friends' hacked accounts, from "banks" and "couriers", in groups and in status updates. Because chats feel personal, people tap links there more readily than in email.
How links are disguised in chats
- Previews with real logos: the website decides what title and picture appear.
- Lookalike addresses:
hxxps://bank-secure-verify[.]cominstead of the bank's real site. See lookalike domains. - Shortened links that hide the destination. See shortened links.
- Fake WhatsApp pages asking you to "verify" your number and code.
- Trusted messengers: a friend's stolen account. See how stolen accounts are used.
Where they lead
- Fake login pages for banks, email and social media. See fake login pages.
- Payment pages for fake fees, deliveries or prizes.
- Downloads of malicious apps. See malicious files and APKs.
- Pages that collect your WhatsApp code. See voting scams.
Go direct instead. If a message says something is wrong with an account or delivery, open the official app or type the website yourself.
If you tapped and entered details
See entered your password on a phishing page, and call your bank if you entered card or banking details.
Next: how to check a link sent on WhatsApp. For more, see our guide to WhatsApp scams.
Frequently asked questions
Can I get hacked just by opening a WhatsApp link?
Usually the danger comes from what you do next: entering details, downloading a file or approving something. Keep your phone and apps updated to reduce other risks.
Does the link preview prove the site is real?
No. A preview shows a title and picture chosen by the website owner. Scam sites can show any logo and title they like.
I clicked a link and entered my details. What now?
Change the password on the real site, contact your bank if you entered card or banking details, and follow our steps for entering details on a phishing page.
Sources
- About suspicious messages and scams, WhatsApp Help Center
- How To Recognize and Avoid Phishing Scams, US Federal Trade Commission
- How to protect your account from malware, WhatsApp Help Center
