WhatsApp users are being alerted to a new scam dubbed “GhostPairing” that deceives them into granting unauthorized access to their accounts. This fraudulent scheme, recently uncovered by cybersecurity company Avast, poses a serious risk as victims may remain unaware of the breach for an extended period.
In contrast to previous scams focused on password theft, this tactic can lead to more severe fraudulent activities. Security experts caution that scammers gaining entry to private conversations, audio messages, and images open the door to potential impersonation, targeted fraud, and extortion.
The scam typically begins with the victim receiving a message from a familiar contact, purporting to have found a photo and including a suspicious link. Clicking on the link redirects the user to a counterfeit webpage resembling Facebook, prompting them to “verify” their identity to view the image. However, this seemingly innocuous verification process is actually a part of WhatsApp’s device-linking procedure.
By inputting a valid pairing code, unwitting victims inadvertently link the attacker’s browser as a trusted device, granting continuous access to messages, media, and contacts without the need for a password change or account lock. Once compromised, the hacked account autonomously sends messages to contacts, propagating the scam organically.
To safeguard against potential WhatsApp account pairing by scammers, users are advised to take precautionary measures including checking and removing unfamiliar linked devices in WhatsApp settings, treating any requests to scan QR codes or enter pairing codes with suspicion, and activating two-step verification while educating family and group chats about the risks.