Introduction
Let me tell you about what happened to my cousin last month.
His name is Bilal. He lives in Rawalpindi. He works as a sales representative for an electronics company. He is not a stupid person. He has a university degree. He uses the internet every day.
One afternoon, he received a WhatsApp message from a number he did not recognize. The profile picture showed a logo of a well-known bank in Pakistan. The message said that his bank account had been locked due to suspicious activity. To unlock it, he needed to click a link and verify his information.
The message looked professional. There were no spelling mistakes. The link looked almost real. It started with the bank's name, then had several words, then ended with something like "com" but with extra letters.
Bilal was worried. He had just received his monthly salary. His rent payment was due in two days. He did not want his account to be locked.
He clicked the link. The website that opened looked exactly like his bank's login page. He entered his username and password. Then the website asked for the OTP code that was sent to his phone. He entered that too.
Fifteen minutes later, he received a text message from his bank. "15,000 PKR has been transferred from your account."
His heart stopped. He checked his bank app. The money was gone. The scammer had emptied his account.
Bilal called me that evening. His voice was shaking. He asked me how this happened and what he should do. I told him to call his bank immediately and block his account. He did. But the money was already gone. The bank said it could not reverse the transaction because he had willingly entered his OTP code.
That day, I realized that WhatsApp scams have become much more sophisticated. They are no longer just messages from "Microsoft" saying your computer has a virus. These new scams are targeted. They look real. They create urgency. They trick smart people.
Today, I will share three new WhatsApp scams that are spreading in Pakistan in 2026. I will explain exactly how each scam works and how to protect yourself and your family members.
Scam One: The Fake Bank Alert
This is the scam that caught my cousin Bilal. It is very effective because it creates fear.
Here is how it works.
You receive a WhatsApp message from a number you do not recognize. The profile picture is the logo of a real bank like HBL, UBL, Meezan Bank, or Allied Bank. The message says something like:
"Dear customer, your bank account has been temporarily locked due to unusual activity. Please verify your account immediately by clicking this link. Failure to verify within 24 hours will result in permanent account closure."
The link looks almost real. It might be "hbl-security-verify.com," "ublloginsecure.net," or "meezanbank-alert.org." The scammer hopes you will see the bank name in the link and assume it is safe.
When you click the link, you are taken to a website that looks exactly like your bank's real login page. It has the same colors, the same logo, the same layout. You enter your username and password. Then the website asks for the OTP code that was sent to your phone. You enter that too.
Now the scammer has everything they need. They can log into your real bank account and transfer money out. They do it immediately, often within minutes of receiving your information.
Why this scam works so well:
It creates urgency. The message says you only have 24 hours. This makes you act quickly without thinking.
It looks professional. The scammers have gotten much better at designing fake websites. Some are nearly impossible to distinguish from the real ones without looking closely at the website address.
It exploits fear. The thought of losing access to your bank account is terrifying. Fear shuts down your rational thinking.
How to protect yourself:
Never click a link in a WhatsApp message from an unknown number. Even if the message looks real, do not click it. Open your bank's official app or type the bank's real website address manually into your browser.
Check the phone number. Real banks rarely contact customers through WhatsApp for security issues. If they do, they use verified business accounts with green check marks. If the number is a regular mobile number starting with 03xx, it is almost certainly a scam.
Look at the website address carefully. The real HBL website is hbl.com. The real UBL website is ubl.com.pk. The real Meezan Bank website is meezanbank.com. If the address has extra words before or after the bank name, it is fake.
Remember that no legitimate bank will ever ask for your OTP code. Not by WhatsApp. Not by phone call. Not by text message. Your OTP code is secret. It is for your eyes only. Anyone who asks for it is a scammer.
If you receive a message like this, do not respond. Do not click anything. Block the number. Report it to WhatsApp. Then call your bank using the official phone number from their website and ask if there is any issue with your account. There will not be.
Scam Two: The Fake Job Offer
This scam has become very common in 2026 because unemployment remains high in Pakistan. Scammers know that people are desperate for work. They exploit that desperation.
Here is how it works.
You receive a WhatsApp message from an unknown number. The message says something like:
"Dear candidate, we have reviewed your resume and are pleased to offer you a work-from-home position. The job involves simple online tasks and pays 40,000 to 60,000 PKR per month. No experience required. Please contact this number for more details."
The message might claim to be from a real company like Daraz, Foodpanda, or a well-known call center. Or it might be from a fake company with a professional-sounding name.
If you respond, the scammer will explain the job. It is usually something like "product listing," or "data entry," or "customer reviews." They will tell you that you need to pay a registration fee, a training fee, or a security deposit. The amount is usually between 2,000 and 10,000 PKR.
They will promise that this fee is refundable. They will promise that you will start earning immediately after paying. They will send you screenshots of other people who have supposedly made money.
If you pay the fee, the scammer will disappear. Your money is gone. You will never hear from them again.
Why this scam works:
It targets people who need money. The promise of 40,000 to 60,000 PKR per month for simple work is very appealing.
It uses real company names. People trust Dara,d Foodpanda, and other well-known brands.
It creates a sense of opportunity. The scammer may say there are only a few positions left. This makes you act quickly.
How to protect yourself:
Remember this golden rule. No legitimate employer will ever ask you to pay money to get a job. Not for training. Not for registration. Not for a security deposit. Not for anything. Jobs pay you. You do not pay for jobs.
Verify the company. If the message claims to be from Daraz, go to the official Daraz website. Look for their careers page. See if they are actually hiring for work-from-home positions. Call their official phone number and ask.
Search for reviews. Type the phone number into Google. Type the company name followed by the word "scam." See what other people are saying.
Ask questions. Legitimate recruiters will be happy to answer your questions. They will have a professional email address, not just a WhatsApp number. They will have a website. They will not pressure you to pay immediately.
Tell your unemployed friends and family members about this scam. The people most vulnerable to it are those who need money the most. They are also the ones who can least afford to lose money to scammers.
Scam Three: The Fake Friend in an Emergency
This scam preys on your love for your family and friends. It is emotionally manipulative and very effective.
Here is how it works.
You receive a WhatsApp message from a number you do not recognize. The message says something like:
"Hello bhai, this is my new number. I lost my phone yesterday. I am in an emergency. I need 5,000 PKR immediately. My car broke down on the motorway, and I need to pay the mechanic. I will return the money tomorrow."
The message might use the name of your actual friend or family member. The scammer has done research. They have looked at your social media to see who you are close to.
If you hesitate, the scammer will pressure you. They might say, Please, ee bhai, I am stuck here. The mechanic is waiting. I have no one else to call." They might send a photo that looks like it was taken from your friend's social media.
If you send the money, it goes to the scammer's account. Your friend never receives it. When you later call your friend on their real number, they have no idea what you are talking about.
This scam works because it plays on your emotions. You want to help your friend. You do not want them to be stranded. The urgency makes you act without verifying.
Why this scam works:
It creates an emotional emergency. You feel pressure to help your loved one.
It uses a new number. The scammer hopes you will add the new number to your contacts and assume it is really your friend.
It asks for a relatively small amount. 5,000 PKR is not a huge sum. Many people would send it without thinking twice.
How to protect yourself:
Always verify. Before sending any money, call your friend at their old, known phone number. If they do not answer, call another family member. Ask them if they have heard about any emergency.
Ask a question only your real friend would know. Ask about a shared memory. Ask about something that happened last week. The scammer will not know the answer.
Do not trust messages from unknown numbers. Even if the message uses your friend's name, be suspicious. Phone numbers are easy to spoof. Names are easy to fake.
Talk to your family members about this scam in advance. Tell your parents and siblings that if they ever receive an emergency message from you, they should call your real number to verify. Tell them you will never ask for money through WhatsApp.
If you receive a suspicious message, do not respond. Do not send money. Block the number and report it to WhatsApp.
Bonus Scam: The Fake COD Package Delivery
This scam is becoming more common as online shopping grows in Pakistan.
Here is how it works.
You receive a WhatsApp message from a delivery company. The message says that a COD package is on its way to your address. The message includes a tracking number and asks you to click a link to confirm your address or pay a small fee for faster delivery.
When you click the link, you are taken to a website that looks like a real courier company's site. It asks for your address, your phone number, and sometimes your CNIC number. Then it asks for a small payment of 100 to 200 PKR for "processing" or "express delivery."
You pay the small fee. The scammer now has your personal information and your payment details. They may use your CNIC number to open fake accounts. They may sell your information to other scammers.
The package never arrives because it never existed.
How to protect yourself:
Track your packages through the official app of the courier company. Daraz and other shopping platforms have built-in tracking. Do not use links sent to you by unknown numbers.
Do not pay for COD packages in advance. The entire point of COD is that you pay when you receive the package. If someone asks you to pay a fee before delivery, it is a scam.
Check the sender's number. Real courier companies use verified business accounts or specific short codes. They do not send delivery updates from regular 03xx mobile numbers.
How to Report WhatsApp Scams in Pakistan
If you receive a scam message, do not just ignore it. Report it. Your report could help protect others.
Reporting to WhatsApp:
Open the chat with the scammer. Tap on the three dots in the top right corner. Select "More" then "Report." Choose whether to block and report the contact. WhatsApp will receive the report and can take action against the account.
Reporting to FIA (Federal Investigation Agency):
Pakistan's FIA has a Cyber Crime Wing that accepts complaints about online scams. You can file a complaint online at nrfcu.gov.pk. You will need to provide your CNIC number, the scammer's phone number, screenshots of the messages, and details of any money you lost.
Reporting to your bank:
If you lost money to a scam, call your bank immediately. They may be able to block the scammer's account or reverse the transaction if you act quickly enough. The sooner you call, the better your chances.
Reporting to the public:
Post about the scam on social media. Share the scammer's phone number and how the scam works. Your post could prevent someone else from falling victim.
How to Protect Older Family Members
My aunt is in her sixties. She uses WhatsApp to talk to her children and grandchildren. She does not understand how online scams work. I worry about her constantly.
I have taken several steps to protect her. Here is what I recommend for older family members.
First, I sat down with her and explained the most common scams. I showed her real examples. I told her never to click any link sent by an unknown number. I told her never to share her bank details or CNIC number with anyone on WhatsApp.
Second, I added her to a family group where we share scam alerts. Whenever any of us receives a suspicious message, we post it in the group. She learns from our examples.
Third, I set up her banking app on her phone with my help. She does not use it herself. She calls me if she needs to check her balance or send money. This prevents her from accidentally falling for a scam.
Fourth, I told her to always call my brother or me before sending money to anyone. No matter how urgent the message seems, she calls us first.
Talk to your parents and grandparents about these scams. They are the most vulnerable. They grew up in a time when phone scams were rare. They may not understand how sophisticated modern scams have become.
Seven Questions People Ask Me About WhatsApp Scams
Question one: Can scammers hack my WhatsApp just by me opening a message?
Answer: No. Simply opening a message cannot hack your WhatsApp. You need to click a link, download a file, or share a code. However, some sophisticated attacks can exploit vulnerabilities in the WhatsApp app itself. Keep your WhatsApp updated to the latest version to stay protected.
Question two: What if I accidentally clicked a scam link but did not enter any information?
Answer: You are probably safe. The scammer needs your information to steal from you. However, some links can install viruses on your phone. Run a virus scan using a reputable mobile antivirus app. Clear your browser history and cache. Change your important passwords as a precaution.
Question three: Can scammers take over my WhatsApp account?
Answer: Yes, there is a known scam where someone messages you asking for the six-digit code that was sent to your phone. They claim they sent it by mistake or need it for verification. Never share this code with anyone. That code is how WhatsApp verifies your identity. If you share it, the scammer can take over your account.
Question four: How can I verify if a message is really from my friend?
Answer: Call them on their old known number. Ask a question only they would know. Look at their profile picture. If the number is new, wait for them to call you first.
Question five: What information should I never share on WhatsApp?
Answer: Never share your CNIC number, bank account numbers, credit card numbers, OTP codes, passwords, or your mother's maiden name. Scammers can use this information to steal your identity or access your accounts.
Question six: Can the police catch WhatsApp scammers?
Answer: Sometimes, but it is difficult. Scammers often use fake names and prepaid SIM cards registered with fake CNICs. They change numbers frequently. Your best protection is prevention, not hoping the police will catch them after you lose money.
Question seven: Is it safe to give my WhatsApp number to online sellers?
Answer: Be careful. Once your number is out there, you may receive spam and scam messages. Consider using a secondary phone number for online shopping and less important accounts.
My Final Advice
My cousin Bilal lost 15,000 PKR to a WhatsApp scam. He is a smart person. It can happen to anyone.
These scammers are professionals. They spend hours designing fake websites and crafting convincing messages. They know how to push your emotional buttons. They know how to make you act without thinking.
You can protect yourself with a few simple habits.
Do not click links in messages from unknown numbers.
Do not share OTP codes with anyone, not even someone claiming to be from your bank.
Do not pay money to get a job. Legitimate jobs pay you, not the other way around.
Always verify emergency messages by calling your friend on their real number.
Talk to your older family members about these scams. They are the most vulnerable.
If something feels wrong, trust your gut. It probably is wrong.
Share this article with your friends and family. The more people know about these scams, the fewer victims there will be.
Stay safe on WhatsApp.
Related Articles
0 Comments