Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Whatsapp Scam Alert - How Does it Work?
Whatsapp Scam Alert - How Does it Work?

WhatsApp has launched a new security feature called "Scam Alert" that uses an on-device machine learning model to automatically flag potential scam messages from unknown senders. Currently in limited beta testing, this tool detects malicious language patterns and social engineering tactics completely offline, ensuring your chats remain end-to-end encrypted without sending any conversation data to Meta's servers.

How the New "Scam Alert" Works

  • On-Device AI Execution: The system downloads a small machine learning model directly to your phone to scan incoming texts from non-contacts.
  • Private Warning Banner: If a message matches known scam structures, a warning banner appears inside the chat that only you can see.
  • User Control Actions: Upon seeing an alert, you can choose to Block, Report, or ignore the warning and mark the chat as Trusted.
  • Opt-In Accuracy Sharing: If you choose to trust an incorrectly flagged sender, you can optionally opt-in to share the last five messages to help train the AI.
  • Total Transparency: You can review every local scan decision by navigating to Account > Request Info > Scam Alert Activity inside the app.

Red Flags of WhatsApp Scams

While the AI rolls out globally, you should remain vigilant against common social engineering tactics:

  • The "Hi Mum/Dad" Impersonation: Scammers pretend to be a family member using a temporary new number because their phone is "broken," quickly asking for urgent bank transfers.
  • Fake Job Offers: Messages offering high daily pay for simple tasks—like liking YouTube videos—designed to steal your bank details later.
  • Urgent Screen-Sharing Requests: Meta recently rolled out distinct warnings for screen-sharing requests during video calls with strangers, a tactic used to steal OTPs and banking credentials.
  • Malicious APK Links: Delivery or verification texts prompting you to download external Android installation packages (.apk files) that harbor spyware.

How to Protect Your Account

  1. Never Share Your Verification Code: WhatsApp will never ask for your 6-digit SMS registration code.
  2. Turn on Two-Step Verification: Go to Settings > Account > Two-step verification to set up a required PIN.
  3. Restrict Group Invitations: Prevent strangers from pulling you into fraudulent groups by changing your settings via Privacy > Groups > My Contacts.
  4. Verify Externally: If a contact or family member makes an odd financial request, call them directly on their known phone line to verify their identity.
waiting