WhatsApp has taken down 6.8 million accounts between January and June 2025 for suspected involvement in fraud and organized scam networks — a striking reminder of how pervasive and sophisticated these attacks have become (The Washington Post, AP News).

How Hackers Trap You on WhatsApp

1. OTP & Phishing Scams

A common method is sending fake “login” messages urging you to share your one-time password (OTP). If you comply, scammers take control of your account and can impersonate you to request money or data from your contacts (India Today, Outlook Money).

2. SIM Swap Attacks

Hackers trick mobile carriers into transferring your number to a new SIM, intercepting the OTP and using it to access your WhatsApp (Outlook Money, TimesLIVE).

3. WhatsApp Web Hijacking

Scammers can trick you into scanning a fake QR code or remain logged in to your account via WhatsApp Web—allowing them remote access (Outlook Money).

4. Social Engineering & Smishing

Victims receive deceptive invitations or messages (e.g. fake job offers, religious group joins) prompting them to share codes. A real case involved a user accidentally forwarding an OTP after being asked by someone posing as a friend (Reddit, threatcop.com, Johnny Holland).

5. Malware & Infected Files

Malicious files—sometimes disguised as images or apps—can infect your device if auto-downloaded, stealing credentials or installing spyware (Reddit, Johnny Holland).

6. Crypto & Investment Traps

Scammers lure victims with fake investment schemes, especially involving cryptocurrency, using WhatsApp to distribute links and solicit upfront payment (The Washington Post, threatcop.com).

How to Stay Safe: Protection Strategies

Additionally, if you receive unexpected OTPs or notices of login from unfamiliar devices, immediately shut off your WhatsApp access, re-login to reclaim your account, and report the incident (Reddit, The Indian Express, TimesLIVE).

Real-World Insights

“Here’s what happened… a hacker, using a friend’s hacked account, messaged my dad about a religious group… he sent the code and lost access. They then impersonated him asking for money.” (Reddit)

Redditors often note that even failing to enable 2FA can make you easy prey: “Even if someone gets your OTP, they can’t access the account without the second PIN.” (Reddit)

Bottom Line

WhatsApp account hijacks are rising—and closing millions of scam-linked accounts is only part of the battle. Scammers now deploy multi-layered strategies, from AI-driven messages to social engineering and group traps.

To protect yourself:

• Enable 2FA with a strong PIN
• Never share OTPs or click unsolicited links
• Use WhatsApp’s new safety tools for group invites
• Monitor linked devices and privacy settings
• Pause and verify before responding to urgent requests

Staying vigilant and proactive—and spreading awareness—remains your best defense.