Given the service's 1.5 billion users, it's perhaps no surprise that WhatsApp spam is a common issue. Whether it's a scam, a phishing attempt, or just plain old marketing drivel from companies, you need to know how to spot WhatsApp dangers so you can a) block the sender and b) make sure you're not putting your security at risk.
Here are our top ways to spot WhatsApp spam, along with some advice on what steps you should take if you receive such a message.
Most WhatsApp users will be aware that the app lets you forward messages received from one person directly to another recipient (for those that didn't know, long-press a message and tap the forward icon in the upper-right corner of the screen).
However, users might be less aware that WhatsApp has a separate indicator for frequently-forwarded messages. When a message has been forwarded five times, you'll see a double arrow icon rather than the single arrow that denotes a typical forwarded message. This feature rolled out in mid-2019.
The distinction is important: If a message has been forwarded more than five times, it's almost always going to be a form of spam---whether that's yet another boring meme that's doing the rounds, fake news, or something more sinister.
WhatsApp lets you send a message to anyone for whom you have the phone number. That means that the senders of spam can scrape the web for contact details, buy lists of active numbers from the dark web, and even hack other services that have your phone number on file, then send you an unsolicited message.
It's highly unlikely you'll ever have such a sender in your address book, which means that when it lands in your WhatsApp inbox, it will always show as an unrecognized number.
Sure, you'll occasionally get a message from an unrecognized number that turns out to be a buddy who's changed numbers, but most of the time, they will be spam.
A huge part of WhatsApp spam has a single purpose---to try and make you open a link in the message. Click on the link at your peril; it's going to try and illicit your personal details, banking details, login credentials, or any other form of data that has value on the dark web.
Many famous WhatsApp scams of the last few years have used this form of spam:
- WhatsApp Gold: A supposedly premium version of WhatsApp was spammed to millions of users throughout 2016. Clicking on the link and sending a payment would apparently get you access to a fancier version of WhatsApp that celebrities were using. Countless people fell for it.
- WhatsApp Expiration: Another classic WhatsApp scam. You'll see a message claiming that your WhatsApp account has expired and you need to pay to reactivate it. Remember, WhatsApp never charges to download the app and will not levy any new charges on your account once you're up and running.
- Shopping Vouchers: One of the most common WhatsApp scams, you'll get a message offering $250 of high street shopping vouchers if you complete a survey. In practice, the only thing you'll receive in exchange for your efforts is a stolen identity.
Check out our article to learn more about the most common types of scams on WhatsApp.
4. Login/Verification Requests
https://www.youtube.com/watch?v=ZXFYT-BG2So
You cannot use WhatsApp for 2FA verification on any app or service that we're aware of. Of course, you absolutely should set up 2FA on all your accounts; it's one of the best ways to make sure your accounts are secure even if someone has managed to get hold of your login credentials---but those 2FA messages will never arrive on WhatsApp.
Ideally, you should use a dedicated 2FA app/hardware like Google Authenticator or YubiKey, but at the very least they'll arrive via a direct SMS. If you receive such a message on WhatsApp and you've not tried to log in anywhere recently, don't worry. It doesn't mean someone is trying to hack your account. The message is spam and you can safely ignore and block it.
5. Specific Wording
Spam often uses the same generic tactics to try and dupe you. According to WhatsApp's own literature, there are four common types of wording in messages that you need to be aware of:
- The sender claims to be affiliated with WhatsApp.
- Message content includes instructions to forward the message.
- The message claims you can avoid punishment, like account suspension, if you forward the message.
- The content includes a reward or gift from WhatsApp or another person.
If you receive a message that matches one of the criteria, you should delete it immediately.
Once you've identified a WhatsApp message as spam, what are the next steps?
WhatsApp Business lets companies interact with their customers through the WhatsApp interface. It is a violation of WhatsApp's terms to use the WhatsApp Business tool for bulk messaging and unsolicited contact.
Since the start of 2020, WhatsApp has appeared to take transgressions of the rule very seriously:
Our products are not intended for bulk or automated messaging, both of which have always been a violation of our Terms of Service. Beginning on December 7, 2019, WhatsApp will take legal action against those we determine are engaged in or assisting others in abuse that violates our Terms of Service, such as automated or bulk messaging [...] even if that determination is based on information solely available to us off our platform.
If you receive unsolicited contact from a business account, you should file a WhatsApp report immediately. You report a spam number by opening the chat, tapping on the sender's name, and scrolling down to Report Contact.
But what happens when you report someone on WhatsApp? Unfortunately, we don't really know. Encryption means WhatsApp cannot see the contents of the message, but they will be able to see a log of your interactions and other associated data. WhatsApp only says it will "launch an investigation." If the sender is found to be in breach of the Terms of Service, their account could be suspended or banned.
One of the old adages of creating an enjoyable Twitter experience is to block early and to block often. The same philosophy applies to WhatsApp spam. Don't sit there getting frustrated as an endless stream of cat facts land in your inbox; just block the account at the first sign of trouble.
You can block WhatsApp accounts by opening a message, clicking on the three vertical dots in the upper-right corner, and going to More > Block.
Group spam is a real issue. Whether it's an over-eager friend or a who's got your number or a scammer on the other side of the world, you'll often find yourself added to groups that you do not want to be a part of.
In 2019, WhatsApp added a new privacy feature that lets you choose who can add you to new groups. Three options are available: Everyone, My Contacts, and My Contacts Except. To set it up, go to Settings > Account > Privacy > Groups.
Learning to recognize and manage WhatsApp spam is only one small part of staying safe on the app. If you would like to learn more, check out our other articles on how to hide your online status in WhatsApp and how to make WhatsApp more private.
