WhatsApp Scam: A new and dangerous cyber scam has emerged for WhatsApp users, which is being called GhostPairing.

WhatsApp Scam: A new and dangerous cyber scam has emerged for WhatsApp users, which is being called GhostPairing. This scam is considered more dangerous because it doesn't require an OTP, doesn't involve password theft, and doesn't require SIM swapping. Despite this, the scammers gain complete control over the victim's WhatsApp account.

Why did the government issue a warning?

CERT-In (Indian Computer Emergency Response Team), an organization working under the Government of India, has issued an alert regarding this new threat. According to CERT-In, cybercriminals are misusing WhatsApp's device linking feature and tricking users into giving them access to their accounts.

How does the GhostPairing scam work?

The biggest trick of this scam is social engineering, meaning the user is provoked into making a mistake themselves. According to CERT-In, attackers exploit WhatsApp's "Link a device" feature to hijack the account without any additional authentication.

The government advisory states that in this way, cybercriminals can take control of the entire WhatsApp account without the user even realizing what is happening.

How do people fall into this trap?

According to CERT-In, the victim often receives a message like "Hi, look at this photo." This message may come from a contact the user trusts, or at least appears to. The message also includes a photo preview, making it look authentic.

The game begins as soon as you click on the link

As soon as the user clicks on the link, they are taken to a web page where they are asked to verify their identity to view the photo. This is the moment when WhatsApp's device linking process is activated in the background. One click and your account is hacked.

If the user unknowingly approves this request, the scammer's browser connects to the victim's WhatsApp account. The attacker can then access the account from their own device, read messages, and send messages to others.

Why is this scam so dangerous?

The most frightening aspect of the GhostPairing scam is that it doesn't require any technical hacking. The user unknowingly grants access themselves, putting their entire account at risk.

What precautions should you take?

Following the government's warning, it's clear that WhatsApp users should be extremely cautious before clicking on any unknown links, even if the message comes from a known contact. A little carelessness can jeopardize your entire digital life.