Is Your WhatsApp Being Misused Without Your Knowledge? MHA Flags New Scam

The Ministry of Home Affairs (MHA) has issued a strong alert over a fast-expanding cyber fraud in which scammers are gaining access to people's WhatsApp accounts through deceptive advertisements on Facebook and Instagram. The warning, issued by the National Cybercrime Threat Analytics Unit (NCTAU) under the Indian Cybercrime Coordination Centre (I4C), says criminals are exploiting WhatsApp's linked-device feature to quietly take control of accounts and use them for illegal activities.

According to the advisory Mule Whatsapp V1.4, cybercriminals are running polished advertisements that promise users "automatic income," "high commissions," or "referral-based earnings." These ads lead to fake websites or prompt the user to download malicious Android apps disguised as investment or income-generating platforms. Once inside the platform, victims are asked to scan a QR code via WhatsApp to "activate earnings" or "connect their account."

The moment the QR code is scanned, scammers gain linked-device access - a feature meant for users to operate WhatsApp on desktops or other devices. This access allows scammers to read and send messages, control the account remotely, and effectively operate it as a "mule WhatsApp account" without the victim realizing what has happened.

Investigators warn that these compromised accounts are then used to carry out payment fraud, circulate phishing links, send bulk messages, and lure new victims. In some cases, mule accounts have been used to recruit more people into similar scams through fake referral programs. Many of these pages display multi-level commission charts, offering 10%, 5% or 2% commissions on various levels of referrals - a tactic designed purely to make the operation appear legitimate.

Authorities caution that users who unknowingly allow their accounts to be misused may still face legal consequences if the accounts are later linked to criminal activity. "Renting out" WhatsApp accounts or giving strangers access is illegal and can result in serious action, the advisory states.

The government has urged citizens to avoid downloading APK files from unknown sources and to be extremely cautious of social media advertisements offering quick income, guaranteed commissions, or passive earnings. Users are advised to routinely check for suspicious activity under WhatsApp's "Linked Devices" section and immediately remove any unknown device.

The MHA has also directed victims to report hacked or compromised WhatsApp accounts, impersonation attempts, circulation of inappropriate content, or violation of WhatsApp's Terms of Service directly to WhatsApp Support. Complaints should also be registered on the National Cybercrime Reporting Portal to enable quick action.

Cyber experts say the scam is expanding rapidly due to the simplicity of the trick and the trust users place in Meta's advertising platforms. With millions of Indians using WhatsApp for communication, payments and business, officials believe the misuse of linked accounts poses a serious risk.

For more details, read here.