WhatsApp Stranger Scam UK: How to Spot and Stop It
An unexpected WhatsApp message can be genuine, but verify the sender through a contact route you already trust before you reply, pay or share information.
What is a WhatsApp stranger scam?
A WhatsApp stranger scam starts with an unexpected message from an unknown person, or from someone claiming to be a person or organisation you know. The criminal may use a newly registered number, take control of a genuine WhatsApp account, or try to trick you into linking your own account to their device. Their aim may be to obtain money, passwords, one-time codes, identity documents, access to your WhatsApp account, or information they can use in a later scam.
The approach varies. Some criminals impersonate a family member with a “new number”; others begin with an apparent wrong-number message and build a relationship over days or weeks. Job, investment, parcel, business-support and romance stories can all move onto WhatsApp. The shared feature is not the subject of the message but the attempt to make you rely on the chat instead of verifying the request independently.
Receiving an unexpected message does not itself prove fraud. The safe response is to pause before sharing information, opening links, linking a device or sending money.
Warning signs of a WhatsApp stranger scam
No single clue proves that an account is fraudulent. Several of these appearing together are a strong reason to stop and verify:
- A person claiming to be a friend or relative contacts you from a new number and quickly asks for money, gift cards, cryptocurrency or a bank transfer.
- A familiar account makes a request that is out of character. A real account can be compromised, so recognising the number or profile photo is not enough.
- The sender creates urgency, asks you to keep the request secret, or discourages you from checking with another person.
- A supposed job requires an upfront payment, a deposit, paid “tasks”, use of your bank account, or movement to a cryptocurrency platform.
- An investment contact promises guaranteed or unusually high returns, shows profits you cannot independently withdraw, or requires another payment to release funds.
- The sender asks for a six-digit WhatsApp code, a device-linking code, a QR-code scan, screen sharing, a password, PIN or one-time bank code. Do not provide or approve any of these.
- A link leads to a sign-in, payment or identity-check page you did not navigate to through the organisation’s official app or website.
- The sender asks for a passport image, date of birth, bank details or other sensitive information without a purpose you have independently confirmed.
- Details, tone or answers do not fit the person being impersonated. Treat that as a prompt to verify, not proof by itself; privacy settings, travel and language differences make profile photos, country codes and writing style unreliable tests.
How the scam unfolds from first contact to the request
An impersonation scam may move quickly. A message claims to be from a relative who has lost or damaged their phone, then introduces an urgent bill and asks you to pay a new account. A business impersonator may claim that an account, delivery or payment needs immediate attention.
Other scams develop more slowly. A wrong-number conversation, romantic approach, job offer or investment group builds familiarity before introducing a payment or asking for personal information. The criminal may move the conversation through several services so that no single platform sees the whole scheme.
The first payment is not necessarily the end. Criminals often invent another fee, tax, emergency or withdrawal charge after someone has paid. If information rather than money was taken, it may be used to target email, banking, social-media or credit accounts. Stop when the request becomes suspicious; do not pay again in the hope of recovering an earlier payment.
How to verify who is really contacting you
Use a route that did not come from the suspicious chat. If the sender claims to be someone you know, contact that person through a saved number, another established account or in person. Ask about the request itself. A voice note from the suspicious account is weaker evidence because an account may be compromised and voices can be imitated.
If the sender claims to represent a business, bank or public body, close the chat. Open the organisation’s official app or type its known website address yourself, then use the contact details published there or on a card or statement you already hold. Do not call a number, follow a link or install an app supplied in the message.
Do not rely on a profile photo, country code, familiar display name or WhatsApp business presentation as proof. Those details can be copied, hidden by privacy settings or attached to a compromised account. WhatsApp does not show you how old another person’s account is.
Never share a WhatsApp registration code, device-linking code, PIN or bank one-time code. Do not scan a QR code or approve a linked device because an unexpected contact asks you to. Meta warns that criminals use false voting, support and verification stories to link a victim’s WhatsApp account to a criminal’s device.
What to do if you replied, paid or shared information
Preserve evidence first. Take screenshots of the number, profile, messages, links, payment details and any transaction references. Then use WhatsApp’s in-app Report and Block controls. Blocking stops that account messaging or calling you through WhatsApp, but it does not recover money or secure other accounts.
If you sent money, contact the bank or payment provider immediately through its official app or the number on your card. Ask it to attempt a recall and open a scam claim. Speed matters, but withdrawal of the money is not the only question.
For eligible Faster Payments or CHAPS transfers between UK accounts, the mandatory APP fraud reimbursement rules may apply when a criminal deceived you into authorising the payment. Report promptly and no later than 13 months after the final payment. An eligible claim should normally be reimbursed within five business days, up to £85,000. A firm may apply an excess of up to £100, although it may waive it; the excess cannot be applied to a vulnerable consumer. If the firm needs more information it can pause the five-day clock, but it must normally reach an outcome within 35 business days.
If the claim is refused, make a formal complaint and ask for the final response in writing before taking it to the Financial Ombudsman Service.
Other payment methods have different rules. Contact the card issuer, e-money firm, money-transfer service, cryptocurrency platform or PayPal through its own scam-reporting route. A payment you deliberately sent because you were deceived is not the same as an unauthorised transaction made by someone who accessed your account.
If you shared bank information, tell your bank what was exposed and follow its instructions. If you shared a password, change it on the affected account and anywhere else it was reused, starting with your email account, and enable two-step verification. Do not change every password or freeze an account indiscriminately; respond to the information or access that was actually compromised.
If identity information or a copy of an identity document was exposed, consider Cifas Protective Registration. It is a paid service that places a warning flag against your details in the National Fraud Database so participating organisations carry out extra identity checks. It can slow genuine applications and does not cover card transactions. Check your credit files with Experian, Equifax and TransUnion because lenders do not all report to the same agency.
If you shared a WhatsApp device-linking code or scanned a QR code, review Linked Devices in WhatsApp and remove anything you do not recognise. Turn on WhatsApp two-step verification and follow WhatsApp’s official account-recovery guidance if you have lost access.
If you only opened a link and did not enter information, download a file or install software, NCSC guidance says further action is unlikely to be needed, although you should watch for unusual account activity. If you installed software, granted remote access or the phone is behaving unexpectedly, follow the NCSC’s infected-device guidance. Do not rely on a phone antivirus scan as proof that the device is clean; mobile recovery differs by platform and a reset or expert help may be necessary.
How to report a WhatsApp scam in the UK
Report and block the account using WhatsApp’s in-app controls after preserving the evidence you need. A platform report may help WhatsApp investigate or restrict an account, but do not wait for a platform outcome before contacting your bank or the police reporting service.
If you lost money, shared information or otherwise became a victim in England, Wales or Northern Ireland, report the fraud to Report Fraud (formerly Action Fraud) at reportfraud.police.uk or on 0300 123 2040. If you live in Scotland or the crime happened there, report it to Police Scotland on 101 instead. Call 999 if there is an immediate danger.
Use the NCSC route that matches what you received:
- Submit a suspicious website or URL through the NCSC scam-website reporting form.
- Forward a suspicious email to report@phishing.gov.uk.
- Forward an SMS text to 7726 free of charge; this goes to your mobile provider for investigation.
Do not forward a WhatsApp conversation to the suspicious-email mailbox. The WhatsApp account itself should be reported in the app, while fraud or loss goes to Report Fraud or Police Scotland.
Citizens Advice on 0808 223 1133 can explain consumer rights and next steps. Keep the crime or incident reference, bank correspondence and platform-report details with your screenshots and payment records.
Frequently asked questions
Someone says they are my friend on a new WhatsApp number. Is it definitely a scam?
No. People genuinely change numbers and lose phones. Do not rely on the new chat to settle the question: contact your friend through a saved number or another route you already trust and ask about the request. Until you have verified it, do not send money, share codes or disclose sensitive information.
I sent money after a WhatsApp message. Can I get it back?
Possibly, and you should not assume the money is lost. Contact the bank or payment provider immediately and ask it to attempt a recall and open a scam claim. For eligible Faster Payments or CHAPS transfers between UK accounts, mandatory APP reimbursement rules may cover a payment you authorised because a criminal deceived you. Claims should be made promptly and within 13 months; eligible claims are normally reimbursed within five business days, up to £85,000, with a possible excess of up to £100. Other payment methods use different recovery routes. Report the fraud to Report Fraud on 0300 123 2040 in England, Wales or Northern Ireland, or Police Scotland on 101 in Scotland.
What should I do if I shared bank details or passport information?
Tell your bank exactly what information was exposed and follow its instructions. Change passwords only where they were disclosed, reused or may have been accessed, starting with email, and enable two-step verification. If identity information or a document copy was exposed, consider Cifas Protective Registration and check your credit files with Experian, Equifax and TransUnion. Report any fraud through Report Fraud, or Police Scotland in Scotland. If the physical passport was lost or stolen, use the GOV.UK passport-cancellation route as well.
Can WhatsApp remove an account I report?
WhatsApp can investigate reports and take action against accounts that breach its rules, but removal and response times are not guaranteed and you may not receive a detailed outcome. Preserve evidence, report and block the account in WhatsApp, then separately contact your bank and the appropriate police reporting service if money, information or account access was lost.
Is it safe to block a suspected scammer?
Yes. Save the evidence and submit the in-app report first, then block the account. Blocking stops that account messaging or calling you through WhatsApp, but the person may try another number and blocking does not undo a payment or secure a compromised bank, email or WhatsApp account. Complete the relevant recovery steps as well.
Sources checked
- Meta — New WhatsApp tools and tips to beat messaging scams
- Meta — WhatsApp device-linking scam warnings
- WhatsApp Help Center — block and report a contact
- Report Fraud — reporting cyber crime and fraud
- Payment Systems Regulator — APP fraud reimbursement protections
- Cifas — Protective Registration
- Information Commissioner’s Office — UK credit-reference agencies and free file access
- NCSC — report a scam email
- NCSC — report a scam text
- NCSC — report a scam website
- NCSC — what to do after interacting with a phishing message
- NCSC — recover an infected device