How to protect yourself from the WhatsApp scam that steals your identity and asks contacts for money

Scammers are using "WhatsApp Screen Mirroring Fraud," a technique that involves hackers stealing accounts and impersonating WhatsApp users to ask contacts for money.

The scam works like this: cybercriminals call through the instant messaging application pretending to be a contact. When the user answers the phone, they see a black screen. It is then that the person on the other end of the line asks them to share their screen to see what is happening: introducing the Trojan horse into the devices and taking over the account.

After screen sharing, those affected receive a notification at the top of their screen: this is a text message from the WhatsApp application with their security code. As they are sharing the screen, this code is visible to their interlocutor, who will use it to steal the account, after which the hacker closes the app, making it impossible to log in again.

One WhatsApp user said that, in the following hours of the black screen, some of their contacts informed them that they were receiving messages from their WhatsApp account asking them to send money via Bizum urgently.

Incibe, Spain's national cybersecurity institute, has issued a series of recommendations to help users keep their accounts safe.

What to do if your account has been stolen?

• Warn your contacts to prevent them from falling for a scam.
• Get in touch with the contact from whom you received the video call so that they can take the same measures as them, as they have also been the victim of WhatsApp account theft.
• Try to reinstall the app to force them to receive a code again.
• Contact WhatsApp support at the contact email support@whatsapp.com to ask for help.
• If this also fails to recover the account, contact WhatsApp's Data Protection Officer.
• If you do not receive a response within one month, or if the response is negative, report the incident to authorities.
• Contact your bank to inform them of what has happened and take the appropriate measures.

How to prevent account theft?

• Set up two-step verification on your mobile phone.
• Do not share your screen without being sure who you are talking to.
• Never give out or share codes you receive, as these are personal and non-transferable.