Pakistan’s National CERT Warns of Rising WhatsApp Account Hijacking
· By imran
Pakistan’s National Cyber Emergency Response Team (National CERT) has warned WhatsApp users about account hijacking scams that can expose personal information, enable financial fraud and allow criminals to impersonate victims.
According to the advisory, cybercriminals are using social engineering tactics, phishing links, call-forwarding tricks and malicious QR codes to gain unauthorized access to WhatsApp accounts. The attacks target both individual users and businesses, potentially exposing private conversations and sensitive communications.
One common tactic involves tricking users into sharing the six-digit SMS verification code sent to their phone. Criminals may also send fake security alerts or QR codes to link victims’ accounts to unauthorized devices.
Also read: How to Recover a Hacked WhatsApp Account: Step-by-Step Guide
National CERT advises users never to share verification codes or two-step verification PINs, even with people claiming to represent WhatsApp support. Users should also regularly check the Linked Devices section in WhatsApp settings and log out of any unfamiliar sessions.
The advisory recommends enabling two-step verification and adding a recovery email to make account recovery easier. Users should remain cautious of suspicious links, unexpected requests for money and messages urging them to act immediately.
Anyone who suspects their account has been compromised should attempt to register their phone number again using the official WhatsApp verification process, warn their contacts about possible fraudulent messages and report the incident to WhatsApp Support.
Also read: WhatsApp Is Testing a Bottom Navigation Bar That Shrinks as You Scroll
National CERT also urges businesses to educate employees about these scams and verify financial requests through alternative communication channels.
The key message is simple: Never share your WhatsApp verification code, enable two-step verification and check your linked devices regularly. These precautions can help reduce the risk of account theft and protect personal information.


