Staff Training for WhatsApp Scams
A 15-minute briefing and a few realistic scenarios prepare staff for the WhatsApp scams that target businesses: fake bosses, supplier changes, account takeovers and fake customers.
Most WhatsApp scams against businesses rely on one person acting quickly without checking. A short briefing and a few practice scenarios give staff the confidence to pause and verify.
A 15-minute briefing
- The four scams to know: fake boss requests, supplier bank changes, account takeovers via codes, and fake customers with fake payments.
- The three rules: never share codes, never pay because of a chat alone, always call back on a known number.
- Where to report: name the person and method. See reporting at work.
- No blame: say clearly that quick reporting is always welcome.
Practice scenarios
| Scenario | Right response |
|---|---|
| "The MD" asks for gift cards from a new number. | Call the MD on the directory number. See fake boss requests. |
| A supplier sends new bank details as a PDF. | Call the supplier on a known number. See supplier bank changes. |
| A colleague asks for "the code I sent you by mistake". | Refuse and warn them their account may be hacked. See employee accounts hacked. |
| A customer sends a payment screenshot and asks for goods now. | Confirm the money in the account first. See fake payment screenshots. |
Keep it practical. Real examples from your own sector, with details changed, work best.
Related: security awareness training that works. For more, see our guide to WhatsApp scams.
Frequently asked questions
How long should training be?
Short and regular works better than long and rare. A 15-minute briefing plus occasional scenarios is a good start.
Should we test staff with fake WhatsApp messages?
If you do, tell staff it may happen, avoid cruel lures, and focus on rewarding reports rather than punishing mistakes.
Who needs the training most?
Anyone who can make payments, change supplier details, access customer data or manage the business WhatsApp account.
Sources
- Phishing attacks: defending your organisation, UK National Cyber Security Centre
- Small organisations guide to cyber security, UK National Cyber Security Centre
- About suspicious messages and scams, WhatsApp Help Center
