I4C Issues a Transnational Cybercrime Alert Regarding the WhatsApp Web Accounts Renting
I4C Issues a Transnational Cybercrime Alert Regarding the WhatsApp Web Accounts Renting
The National Cybercrime Threat Analytics Unit of I4C has discovered a new trend in transnational crime: some Facebook and Instagram accounts are posting ads claiming users may “earn cash automatically” by connecting their WhatsApp accounts to the site. These ads drive visitors to fraudulent websites or Android apps (.apk) that mimic reputable venues for earning money.
Promises of large commissions and passive income entice gullible people, who are then directed to link their WhatsApp accounts using QR codes. Threat actors are using this campaign to take advantage of WhatsApp’s connected device capability, which enables web-based access. These accounts are essentially being rented out as “mule WhatsApp accounts,” which might then be used for illicit purposes, including fraud, frauds, or the spread of harmful content.
Modus Operandi
| Advertisement | Threat actors publish Meta advertisements claiming users can earn automatic commissions through QR code scanning or sign-up referrals. |
| Redirection | Users are redirected to fraudulent web pages or prompted to install malicious Android APKs. |
| Account Linking | Victims are instructed to scan a QR code displayed in-app via WhatsApp. Once scanned, the scammer system gains linked-device access to the victim’s WhatsApp account. |
| Commission Scheme | To appear legitimate, a multi-level commission structure is promoted:
● Level 1 (Direct Invites): 10% commission on friends’ earnings. ● Level 2 (Indirect Invites): 5% commission on secondary invites. ● Level 3 (Indirect Invites): 2% commission on third-level invites. This structure encourages continuous sharing and onboarding, creating a pyramid-like network to harvest more linked accounts. |
| Abuse | Use of mule WhatsApp accounts to scale scams (phishing, payment fraud, recruitment for further mule services). |
Precautions
- Receiving money illegally and renting a WhatsApp account might have legal repercussions, including an arrest.
- Installing APKs from unidentified sources should be avoided.
- Meta Ads that offer automatic cash earnings, referral commissions, or rapid income should be avoided (particularly when it comes to stock market investments).
- Go to Linked Devices to periodically look for questionable devices connected to your WhatsApp account.
Users are advised to contact the official WhatsApp support team via the following link in the event of identity impersonation, the dissemination of morphed, pornographic, vulgar, or sexually explicit content, the sharing of inappropriate images or videos involving minors, intellectual property rights violations, compromised or hacked accounts, accounts sending out bulk messages containing harmful or misleading information, disabled or banned accounts under WhatsApp’s Terms of Service, or any issue pertaining to WhatsApp Channels.
https://www.whatsapp.com/contact/forms/1534459096974129
About The Author:
Yogesh Naager is a content marketer who specializes in the cybersecurity and B2B space. Besides writing for the News4Hackers blogs, he also writes for brands including Craw Security, Bytecode Security, and NASSCOM.
Read More:
Fake iPhone Offers Made Youth Lose Lakhs on Instagram
About Author
English