WhatsApp messages can look convincing because they may come with a familiar name, profile photo, conversation history or urgent request. Before you click, pay, disclose information or take another important action, work through these checks.
Someone may impersonate a person you know, compromise an existing account or create a convincing profile using another person's name and photograph.
If a message involves money, account access, sensitive information or an unusual request, verify the situation independently before acting.
Work through the checks below. The more important the requested action, the more important independent verification becomes.
Confirm who is actually behind the WhatsApp account before trusting the request.
Pay attention when someone suddenly asks for money, information, access or another unusual action.
Be cautious when the message tells you to act immediately or threatens a negative consequence if you wait.
Treat links in unexpected WhatsApp messages carefully, especially when they lead to login, payment or download pages.
Verify payment requests, account details, transfers and beneficiary information before sending money.
Never send passwords, OTPs, PINs, recovery phrases or private keys through WhatsApp.
Who is asking? Confirm the identity independently.
What are they asking me to do? Understand exactly what action is being requested.
What happens if I am wrong? The greater the potential loss, the more carefully you should verify.
If money, credentials, identity, sensitive information or an irreversible action is involved, pause and verify through a trusted channel before acting.
VERIFY BEFORE YOU TRUST.
