WhatsApp is now the primary communication app for most people in Indonesia. From family matters and work to important transactions, everything is done through WhatsApp. Unfortunately, scammers are also aware of this, and they are increasingly using WhatsApp to carry out phishing or data theft schemes.

Their methods are becoming more creative, more convincing, and often leave victims unaware until it's too late. Therefore, it's crucial to remain vigilant and be aware of the signs of the scams that are currently prevalent.

What is Phishing on WhatsApp?

Phishing on WhatsApp is a scam where the perpetrator sends convincing messages. The messages may be sent on behalf of banks, couriers, marketplaces, or even your own friends or family to trick you into clicking on dangerous links, downloading files, or providing personal data.

Because they look like real accounts, many people immediately trust them without suspicion.

Examples of WhatsApp Scams That Are Currently Rampant

1. “Parcel Courier” Scam Sending Photos

This scam happens a lot. Usually, the perpetrator claims to be a courier from a shipping company that will deliver your order:

“The package in your name cannot be delivered because the address is incomplete. Please check the following photo.”

They send photo files with seemingly normal names (“address.jpg,” “receipt.jpg”), but these files contain malware or redirect to dangerous links.

Once you download them, your phone can be infected with data-stealing viruses.

2. Fake Wedding Invitation Scam from a “Friend”

Scammers create WhatsApp accounts using your friends' names and profile pictures, then send messages such as:

“Hi, this is my wedding invitation. Please open it. I've sent the PDF below.”

The PDF file actually contains malware or malicious scripts that can take over WhatsApp or steal data from your device.

3. Fake Bank Number with Official Logo

This method is becoming more common and more convincing.

Scammers use:

Official bank logo profile photos,
account names similar to customer service,
highly professional messaging styles,
and most recently, they also make phone calls via WhatsApp.

They will call and speak like real bank staff, complete with customer service scripts.

Example dialogue:

“Good afternoon, this is Bank XYZ. There has been unusual activity on your account. We need to verify your identity. Please have your card number and the OTP sent to you ready.”

In reality, banks never call via WhatsApp, let alone ask for OTPs or sensitive data through any kind of call.

Once the victim provides the data, the perpetrator can immediately access the bank account and drain the balance.

4. Friend or Family Phone Number Hacked

This is dangerous because the perpetrator uses the real WhatsApp number of your friend or family member, not a fake one.

The message sent is usually urgent:

“Please, I need a quick transfer. My mobile banking is down.”

Because the chat history and profile photo are real, victims usually believe it immediately.

The friend's account may have been hacked because they previously clicked on a phishing link or gave their OTP to a scammer.

How to Protect Yourself from WhatsApp Scams

1. Don't immediately trust a number just because it looks “official”

Logos and names can be forged, and even WhatsApp calls can be manipulated with AI voices.

2. Do not download files from unknown numbers.

Photos, PDFs, or documents may contain malware. Always be careful when downloading anything via WhatsApp.

3. Do not click on random links.

Open the official website manually through your browser for greater security. When you open a website, make sure there is a padlock symbol (🔒) next to the web address and that the domain starts with https://. If it only says http:// without the “s,” it is best not to enter any personal data.

4. Double-check messages from friends

If you feel that the message sent is strange, call their number directly (not via WhatsApp) for verification.

5. Enable WhatsApp Two-Step Verification

Two-Step Verification is an additional security feature on WhatsApp that helps prevent your account from being hacked or taken over by someone else.

When this feature is enabled, every time your WhatsApp number is re-registered (for example, on another phone), WhatsApp will ask for an additional 6-digit PIN that you create yourself.

6. Never give out your OTP

OTP should not be shared with anyone to prevent personal data hacking.

The bottom line: Don't panic, always double-check.

Most scams are designed to make victims panic and act immediately. Always take a moment to pause, check the authenticity of the message, and always be cautious with calls or WhatsApp chats.

Use a Secure & Trusted Internet Provider

As a trusted internet service provider, CBN Fiber not only provides fast and stable connections, but is also committed to maintaining the digital security of its customers through services such as CBN Fiber Safe, which comes with cyber protection insurance supported by AON & Chubb.

Learn more about how Cyber Protection from CBN Fiber Safe can protect you from WhatsApp scams and other cyber fraud through this FAQ.

/

/

Beware of WhatsApp Scams: Phishing Methods Are More Creative and Deceptive

Exclusive Promotion for you

Ada pertanyaan? Klik disini

Live chat hanya tersedia pada aplikasi diCBN.

Leave a Message