WhatsApp users need to be cautious of a new scam called “GhostPairing” that deceives them into giving attackers access to their accounts. Recently uncovered by cybersecurity firm Avast, this scam is dangerous as victims may not realize their accounts have been compromised for an extended period.
Unlike previous scams that aimed to steal passwords, this one poses a higher risk of fraud. Experts highlight that scammers gaining access to private chats, voice notes, and photos can lead to impersonation, targeted scams, and even extortion.
The scam typically begins with the victim receiving a message from a familiar contact stating they found their photo and providing a link. Clicking on the link redirects the user to a fraudulent page resembling Facebook, asking for verification to view the image.
This seemingly innocent verification step is part of WhatsApp’s device-linking process. By entering a valid pairing code, victims unknowingly link the attacker’s browser as a device, granting ongoing access to messages, photos, and contacts without the need for a password change.
Once an account is compromised, it sends messages to contacts, spreading the scam further. To safeguard against such scams, users should regularly check their WhatsApp settings for linked devices, treat QR code or pairing code requests with suspicion, and enable two-step verification while educating others in their network about these risks.