New WhatsApp scam uses fake voting links to hijack accounts

A sophisticated new scam is making its way through Dutch WhatsApp groups, catching even the most cautious users off guard. The scheme typically begins with an urgent message from a friend or acquaintance asking you to vote for their daughter in a contest, such as a dance competition. While the link looks legitimate at first glance, clicking it initiates a process that effectively hands over the keys to your digital life.

The ghost pairing trick

Once a user clicks the link, they are directed to a fake voting page that asks for a phone number and a verification code. In reality, the victim is not casting a vote but instead enabling a feature known as ghost pairing. This exploits the ability to link a secondary device, like a laptop or tablet, to an existing WhatsApp account. By entering the code, the user unknowingly grants the attacker permission to sync the account to a hacker-controlled device.

Sophie ter Schure, who recently fell victim to this scam, described the frantic aftermath of her account being compromised. The hackers immediately used her profile to send the same phishing link to her entire contact list, leading to a flood of panicked responses. She spent hours reaching out to friends to warn them, but the damage was already done as others had already engaged with the malicious link.

I feel terrible because I pride myself on being careful with digital security, especially when it comes to potential fraud.

After her account was flagged and blocked by WhatsApp, Ter Schure lost access to essential groups, including school communication channels. This highlights a critical reality for expats and internationals living in the Netherlands, as many rely heavily on WhatsApp for coordination with schools, landlords, and professional networks. Losing access to these chats can cause significant disruption to your daily routines and administrative tasks.

How to protect yourself

The Dutch Fraud Helpdesk has reported a sharp increase in these incidents, noting that recent data breaches have provided criminals with the personal information needed to make these messages appear highly convincing. They emphasize that victims should not blame themselves, as the psychological manipulation involved is designed to bypass standard security instincts by appealing to a sense of helpfulness and community.

In response to the rising tide of digital crime, the Dutch government has launched a new campaign titled 'Laat je niet interneppen' or 'Don't get caught in the net.' The primary advice from the Ministry of Justice and Security is simple: take three seconds to think before you click. If an incoming request feels out of character or creates an artificial sense of urgency, reach out to the sender through a different channel to verify the message.

To check if your account has been compromised, you should regularly monitor your 'Linked Devices' menu within the WhatsApp settings. If you see a device you do not recognize, log it out immediately. For more tips on navigating digital safety and other tech news, continue following our site for the latest updates on protecting your online identity in the Netherlands.

Looking ahead, officials warn that no one is immune to these clever tactics. Whether you are a long-term resident or a new arrival, being mindful of your digital footprint remains essential. If you have been targeted, report the incident to the police and notify your contacts as soon as possible to prevent the scam from spreading further within your personal circle.