WhatsApp Scams: The 'Hi Mum' Message and Other Tricks to Watch For
How common WhatsApp scams work in the UK, including 'Hi Mum' messages, account takeover codes and fake investment groups, and how to protect yourself.
WhatsApp is used by most people in the UK, which makes it a favourite tool for scammers. The messages feel personal because they arrive in the same app as messages from your friends and family. Here are the scams to know about.
The "Hi Mum" or "Hi Dad" scam
A message arrives from an unknown number: "Hi Mum, I've dropped my phone in the toilet. This is my new number." After a friendly chat comes the request: an urgent bill or rent payment that needs paying today because their banking app "isn't working on the new phone".
How to protect yourself: call your child or relative on their old number, or ask a question only they would know. Never send money to a new number without speaking to the person by voice first. A real family member won't mind you checking.
The six-digit code scam
You get a message, often from a friend's hacked account, saying "Sorry, I sent you a code by mistake, can you send it back?" That code is actually WhatsApp's verification code for your account. Share it and the scammer takes over your WhatsApp, then uses it to scam your contacts.
Rule: never share a code that's sent to you, with anyone, ever.
Fake investment and "job" groups
You're added to a group that promises big returns on crypto or shares, or offers easy money for liking videos or writing reviews. Early "profits" look real to build trust, then you're asked to deposit more. These almost always end with your money gone.
Fake prizes, deliveries and business accounts
Messages claiming you've won something, missed a parcel or need to update your account details. Check for the official verified badge on business accounts, and contact companies through their own website instead.
Lock down your WhatsApp in 2 minutes
- Turn on two-step verification: Settings > Account > Two-step verification. Set a PIN that will be needed if anyone tries to register your number on a new phone.
- Control who can add you to groups: Settings > Privacy > Groups, then choose My contacts.
- Silence unknown callers in Settings > Privacy > Calls.
- Consider adding a passkey or email address to your account in Account settings for easier recovery.
If you've been caught out
- If you sent money, call your bank immediately using the number on your card.
- If you lost your account, reinstall WhatsApp and register your number again. You'll get a new code by text, which kicks the scammer out (unless they've set up two-step verification, in which case contact WhatsApp support).
- Warn your contacts that your account was compromised.
- Report and block the scam number inside WhatsApp.
More general warning signs are in our guide to phishing scams.