• Text message scam hijacks WhatsApp accounts
• Cybersecurity firms warn

Cybersecurity companies are warning of a new scam targeting WhatsApp users, involving an ordinary-looking text message that hides malicious intent.

The trick begins with a short message, such as: “Hello, I found your photo!” accompanied by a link that opens a page designed to look like WhatsApp’s official verification page. Users are then asked to enter their phone number to receive a verification code.

However, entering the code on the fake page immediately gives the attacker full access to the account—without needing to hack passwords or use complicated methods. The scam allows criminals to use the account to target the victim’s contacts or even impersonate the user for financial fraud.

Cybersecurity firms refer to this method as the “Ghost Pairing” scam, one of the latest account takeover techniques circulating this year. It relies on tricking users into entering the verification code, which grants the attacker full control over the account.

Avast noted that the scam spreads quickly, exploiting WhatsApp’s own system to facilitate unauthorized access. Malwarebytes highlighted that a key warning sign of the fake page is the presence of links pointing to photos or posts, indicating the site is not genuine. Users are advised never to enter personal information on suspicious pages.

Once a phone number and verification code are entered on the fraudulent page, the attacker instantly gains full control of the WhatsApp account.