Lebanon’s ISF warned of rising WhatsApp account takeover attempts.
Scammers send fake group invitation links from hacked accounts.
Victims are tricked into sharing their OTP verification code.
Fraudsters then use the hacked account to contact others and request money.
Users should avoid suspicious links, never share OTP codes and activate two-step verification.
ISF Issues WhatsApp Scam Warning
Lebanon’s Internal Security Forces warned citizens against a rise in electronic fraud attempts targeting WhatsApp users through fake group invitation links.
The ISF said scammers are using hacked WhatsApp accounts belonging to friends or relatives to send fraudulent links that appear to invite users to join a shared group. Once opened, the links lead to fake pages that ask users to enter or share the one-time password sent by SMS.
How the Scam Works
The ISF said the OTP allows the fraudster to register the victim’s phone number on another device and take full control of the WhatsApp account.
After taking over the account, the scammer may repeat the same method with the victim’s contacts. In some cases, the fraudster also impersonates the account owner and asks contacts to send money through transfer apps or services used in Lebanon.
Users should take four immediate precautions:
Do not click suspicious group invitation links, even if they come from someone you know.
Call the sender directly before opening any unusual link.
Never share an OTP verification code with anyone.
Confirm any money request through a direct phone call.
Enable WhatsApp two-step verification.
Why Two-Step Verification Matters
WhatsApp says two-step verification adds an extra layer of security by requiring a six-digit PIN when registering an account again. Users can activate it through WhatsApp settings under Account, then Two-Step Verification.
The ISF said this feature can prevent a fraudster from accessing an account even if they manage to obtain the SMS verification code.
A Wider Digital Safety Concern
The warning highlights a common weakness in online scams: trust. Fraudsters use compromised accounts to make messages appear familiar and urgent.
The ISF urged users to slow down before clicking links or responding to financial requests. A direct phone call can often expose the scam before the account, and the money, disappear.
