Close Menu
  • Home
  • Articles
    • Attacks
      • BEC
      • Data Breach
      • DDoS
      • Evasion Attacks
      • Injection
      • Malware
      • MITM
      • Phishing
      • Ransomware
      • RCE
      • Social Engineering
      • Spoofing
      • Spyware
    • Business and Policy
      • BCP and DRP
      • GRC
      • Regulations
    • Data Protection
      • DLP
      • DRM
      • Encryption
      • IAM
    • Future, Trends and Insight
      • AI
      • Events & Community
      • Emerging Tech
      • Expert Panel
      • Interviews With Experts
      • Insights
      • Study & Research
    • Resources
      • Guides
      • Tools
      • Training & Education
    • Security
      • API
      • Apps
      • Cloud
      • Critical Infrastructure
      • Endpoint
      • Hardware
      • IoT
      • Mobile
      • Network
      • OT
      • Port Security
      • Security Architecture
      • Software Development
      • Supply Chain
      • Zero Trust
    • Threats and Vulnerabilities
      • Emerging Threats
      • Insider Threats
      • Risk Management
      • Threat Intelligence
      • Zero Day
  • News and Exclusives
    • Latest News
    • ISB Exclusive
    • Positive News
  • Who We Are
    • About Us
    • Information Security Buzz Expert Panel​
    • Write for Us
    • Media Pack
  • Contact Us
  • Newsletter
Facebook X (Twitter) LinkedIn
Facebook X (Twitter) LinkedIn
Information Security BuzzInformation Security Buzz
  • Home
  • Articles
    • Attacks
      • BEC
      • Data Breach
      • DDoS
      • Evasion Attacks
      • Injection
      • Malware
      • MITM
      • Phishing
      • Ransomware
      • RCE
      • Social Engineering
      • Spoofing
      • Spyware
    • Business and Policy
      • BCP and DRP
      • GRC
      • Regulations
    • Data Protection
      • DLP
      • DRM
      • Encryption
      • IAM
    • Future, Trends and Insight
      • AI
      • Events & Community
      • Emerging Tech
      • Expert Panel
      • Interviews With Experts
      • Insights
      • Study & Research
    • Resources
      • Guides
      • Tools
      • Training & Education
    • Security
      • API
      • Apps
      • Cloud
      • Critical Infrastructure
      • Endpoint
      • Hardware
      • IoT
      • Mobile
      • Network
      • OT
      • Port Security
      • Security Architecture
      • Software Development
      • Supply Chain
      • Zero Trust
    • Threats and Vulnerabilities
      • Emerging Threats
      • Insider Threats
      • Risk Management
      • Threat Intelligence
      • Zero Day
  • News and Exclusives
    • Latest News
    • ISB Exclusive
    • Positive News
  • Who We Are
    • About Us
    • Information Security Buzz Expert Panel​
    • Write for Us
    • Media Pack
  • Contact Us
  • Newsletter
Subscribe
Information Security BuzzInformation Security Buzz
Home - Application Security - WhatsApp Shuts Down 6.8 Million Scam Accounts
Application Security Latest News News & Analysis Security

WhatsApp Shuts Down 6.8 Million Scam Accounts

Kirsten DoyleBy Kirsten DoyleAugust 7, 20254 Mins Read
Share LinkedIn Twitter Facebook Copy Link Email
WhatsApp Shuts Down Scam Accounts
Share
Facebook Twitter LinkedIn Email Copy Link
Quick AI Summary
ChatGPTClaudeGeminiGrokPerplexityDeepSeekCopilot

WhatsApp has removed nearly seven million accounts tied to global scams in just six months, the BBC reports. 

According to parent company Meta, many of these accounts were traced back to scam centres in South East Asia, some operated by criminal networks using forced labour. The revelation comes alongside WhatsApp’s rollout of new anti-scam tools, including a warning system for users added to group chats by people outside their contacts. 

Meta says its systems detected and disabled millions of accounts before scammers could make them operational. The tactic is part of a larger and more troubling pattern: bad actors pose as legitimate contacts, luring victims into group chats or private conversations, then inveigling them into bogus investment schemes. 

A common method involves hijacking WhatsApp accounts or mimicking familiar profiles. Victims are typically contacted first via SMS, before being nudged to continue the conversation on messaging platforms like WhatsApp. 

Once the victim is drawn in, the bait is set. 

In one case, WhatsApp, Meta, and OpenAI collaborated to disrupt a Cambodian operation. The scam promised cash rewards for liking social media posts. But behind the promise was a web of lies promoting a fake rent-a-scooter pyramid scheme. ChatGPT had been used to draft instructions for victims, blending artificial intelligence with old-fashioned deceit. 

Meta said such scams often conclude on cryptocurrency or digital payment platforms. “There is always a catch and it should be a red flag for everyone: you have to pay upfront to get promised returns or earnings,” the company warned. 

Fraudsters don’t just manipulate people, they manipulate platforms, trends, and technology. What starts with a friendly message ends with drained savings and lost trust. 

The UK’s consumer rights group, Which?, welcomed Meta’s action but said it doesn’t go far enough. “Meta must do much more to stop these criminals across all its platforms,” it said. 

A Small Dent? 

Chris Hauk, Consumer Privacy Advocate at Pixel Privacy, says: “I applaud any attempt to protect users against scammers. Unfortunately, we can’t know for sure whether the 6.8 million scam accounts that were banned even puts a small dent in the number of scam accounts. The private nature of WhatsApp ensures that scammers can’t be immediately detected, unless a targeted user complains about the account.  

Hauk says WhatsApp’s new anti-scam features should make it easier for users to avoid scammers who may add them to a group or send an individual message as a starting point for a scam.  

“Moderating private chat groups where there is an expectation of privacy is much more difficult than moderating an open forum,” adds Paul Bischoff, Consumer Privacy Advocate at Comparitech. “Chat groups are insular and have no public visibility, so scams and other inappropriate content are less likely to be flagged. In the wrong hands, they can be used to perpetrate scams, sell illicit goods and services, spread malware, or distribute CSAM.”

The Full Scope isn’t Known

Bischoff  says while WhatsApp taking down 6.8 million accounts should be applauded, but as with any statistic from Meta, the full scope of the problem isn’t known. “Is 6.8 million accounts a lot for a service with 3 billion active users? Did Meta ban half of the scammers on WhatsApp or just a tenth of them? No one knows, probably not even Meta. Furthermore, banning accounts is only a temporary measure. Scammers can easily create new ones.”  

WhatsApp users should heed the new alerts that let them know if they’ve been added to a chat group by someone not in their contacts lists, Bischoff says. “This is one of the most common ways that scammers pull people into their chats.”

Kirsten Doyle
Kirsten Doyle
Information Security Buzz News Editor

Kirsten Doyle has been in the technology journalism and editing space for nearly 24 years, during which time she has developed a great love for all aspects of technology, as well as words themselves. Her experience spans B2B tech, with a lot of focus on cybersecurity, cloud, enterprise, digital transformation, and data centre. Her specialties are in news, thought leadership, features, white papers, and PR writing, and she is an experienced editor for both print and online publications.

  • Kirsten Doyle
    Klue supply chain breach exposes Salesforce data at several security firms
  • Kirsten Doyle
    AI-Powered Attacks Become Top Concern for Security Professionals, New Filigran Survey Reveals
  • Kirsten Doyle
    ShinyHunters targets Oracle PeopleSoft customers through critical zero-day
  • Kirsten Doyle
    SIG report: AI-generated code is linked to twice the security risk and rising technical debt

The opinions expressed in this post belong to the individual contributors and do not necessarily reflect the views of Information Security Buzz.

Share. Facebook Twitter LinkedIn Email Copy Link

Related Posts

AppSec is dead, long live AI security

April 29, 20265 Mins Read

Managing App Access on Frontline Devices in an Always-On World

March 9, 20264 Mins Read

OWASP Top 10 2025: New Enemies, Old Foes, and an Approach to Vulnerability Remediation That Must Evolve

January 22, 20265 Mins Read
ISB-Bora-Side-Bar

No se ha podido establecer conexión. Error 429

 
ISB-Bora-Side-Bar
Black ISB Logo

Information Security Buzz is an independent resource that provides the experts’ comments, analysis, and opinion on the latest Cybersecurity news and topics

X (Twitter) LinkedIn Facebook RSS

Working With Us

  • About Us
  • Advertise With Us
  • Contact Us

Write For Us

  • How To Contribute

The Pages

  • Privacy Policy
  • Cookie Policy
  • AI Policy
  • Terms & Conditions
  • Copyright Notice

Information Security Buzz and all its contents are copyright © 2014-2025. All rights reserved. All third-party trademarks are recognized.

Type above and press Enter to search. Press Esc to cancel.

Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}