Police warn of new WhatsApp scam in Czechia: Here's what to watch out for

A new scam targeting WhatsApp users has been reported across several regions in the Czech Republic. The scam involves deceptive messages including links that, once clicked, give hackers access to users’ WhatsApp accounts. The attackers then use the compromised accounts to send urgent requests for money to the user’s contacts.

Police are urging individuals to be cautious and report any suspicious activity immediately. The scam follows a consistent pattern: a user receives a message asking for help, often phrased as supporting a friend or family member in a competition.

Clicking on the link provided in the message gives the attackers remote access to the victim's WhatsApp account, enabling them to send fraudulent requests for money to the user's contacts. The messages are designed to appear legitimate, coming from someone the recipient knows, making it easier for the scam to succeed.

Once a user clicks the link, their phone becomes connected to an external device. This connection allows the hackers to control the account remotely. According to Edvard Rejthar, a security analyst at Czechia's cyber incident response team, the attackers use a code to sync the victim's phone with the WhatsApp web interface, enabling them to send messages from the compromised account.

In one instance, a woman from Pilsen clicked on such a link, unknowingly linking her phone to a hacker's device. The next day, messages were sent from her account to her personal contacts, urgently requesting money and claiming that she needed a loan of CZK 32,000.

The attackers were able to convince a few people to send money, with two individuals transferring over CZK 30,000 each to external bank accounts. Fortunately, the victim noticed the scam in time and managed to stop further transactions.

Police have responded quickly to additional reports of the scam, with several cases already filed. In Chomutov, authorities are handling at least five confirmed instances, and there are reports of similar incidents in other areas.

WhatsApp users are advised to take extra precaution when using the platform, even if interacting with messages from contacts. Experts recommend not clicking on any unsolicited links, especially from unknown senders, and verifying the identity of the message sender before acting.

Users are also reminded to avoid sending any money without first confirming the legitimacy of the request; reach out by phone or another method before trusting any messages of this nature.

The situation is also becoming more widespread in Prague and surrounding areas, with police predicting a rise in cases in the near future. Victims are urged to report any instances of fraud as soon as possible.

While authorities have emphasized the importance of acting quickly to mitigate the financial damage, recourse is limited. Since WhatsApp is an external app, mobile operators cannot intervene in these cases, unlike in SMS scams.

As explained by Jiří Grund, president of the Association of Mobile Network Operators, while they can block fraudulent SMS messages, they have no control over third-party apps like WhatsApp.