Top News

WhatsApp has over three billion active users worldwide. Hardly anyone is unaware that a strong, unique password is required to secure an account, and most people do prioritize account security. Yet, cybercriminals still manage to easily perpetrate fraud through schemes ranging from fake investment scams and phishing attacks to "digital arrests."

WhatsApp has implemented numerous robust security measures, such as end-to-end encryption, encrypted cloud backups, automatic spam detection, and two-step verification. However, we must realize that securing WhatsApp requires more than just a strong password; constant vigilance and prudence are essential, as scams are constantly evolving—and notably, AI has armed scammers with a potent new weapon. According to a report by Malwarebytes Labs, scammers can gain access to accounts using tactics like "vote for my friend" scams and by obtaining six-digit PINs. This allows them to easily send messages, read chats, and steal personal information—meaning they do not need a password to breach an account.

However, WhatsApp continuously raises awareness about scams involving AI-generated content, impersonation, and social engineering. To protect against sophisticated cyberattacks, Meta is now preparing to introduce an on-device machine learning and AI-based feature called "Scam Alert."

**How ​​the breach occurs without a password**
According to Malwarebytes Labs, scammers bypass the need for a password by exploiting WhatsApp's "device linking" feature and basic phishing methods. They gain access to a WhatsApp account by sending users a verification code to authorize a new linked session.

Similarly, if you receive a link related to "voting" and complete the connection or verification steps based on it, your WhatsApp account gets linked to a device controlled by the scammer.

In fact, WhatsApp's device linking feature allows a single account to be logged in across multiple devices. While this process is convenient and secure for users, it also presents an opportunity for scammers. Typically, you navigate to the "Linked Devices" option in WhatsApp, verify your identity using biometrics, scan a QR code with the device you wish to link, and confirm the action.

However, devices can also be linked using a phone number and a one-time code. This is where one needs to be vigilant against new scams. Cyber ​​experts advise caution regarding such scams and warn against ever sharing your WhatsApp verification code, even if the request comes from someone you know. ...no matter where it originated.

There are several ways to secure your account.
For security, users should enable two-step verification; this adds a PIN that can prevent scammers from taking over your account, even if they manage to obtain the SMS verification code. WhatsApp recommends using a passkey, which links your account to your device's security system—such as fingerprint, facial recognition, or screen lock.

Disclaimer: This content has been sourced and edited from Dainik Jagran. While we have made modifications for clarity and presentation, the original content belongs to its respective authors and website. We do not claim ownership of the content.