If a WhatsApp forward makes you feel rushed, worried, lucky, or guilty, slow down before you do anything with it. The risky ones usually ask for the same few things: click this link, share this code, pay this small fee, install this app, or forward this warning to everyone.
Most fake WhatsApp messages are not clever. They work because they arrive from someone you know, land at the wrong moment, and ask for one small action before you have time to think.
Run through this before you reply, pay, click, or forward.
First, name what you are looking at
Put the message into one of these buckets:
- News or public warning
- Bank, KYC, parcel, or payment alert
- Job, investment, prize, or refund offer
- Health, disaster, or safety claim
- Screenshot of a notice or headline
- Link to login, payment, or app install
- Voice note asking people to forward quickly
That label matters. A fake courier link needs a different response from a misleading news screenshot.
Red flags that deserve an immediate pause
Do not act if the message:
- Says your account will be blocked today
- Asks for OTP, UPI PIN, card PIN, CVV, or password
- Says you must pay a small fee to receive money, a parcel, or a refund
- Sends an APK or asks you to install an app outside the Play Store or App Store
- Uses a shortened link for banking, KYC, delivery, or government services
- Claims a police, court, customs, or courier case is open against you
- Says “forward this to everyone” or “media is hiding this”
- Has no original source, date, author, or official link
One red flag is enough to pause. Several together usually mean you are looking at a scam or a piece of misinformation.
Check the sender, but do not stop there
A message from a family member can still be fake. They may trust the person who sent it to them, or they may be worried and forwarding it just in case.
Ask:
- Did the sender write this themselves, or forward it?
- Did they personally verify it?
- Is the message copied from another group?
- Does the message pressure you to act before verifying?
Trust the evidence, not the forwarding chain.
Check the link safely
Look at the domain before opening the link.
Watch for:
- Misspelled brands
- Extra words before or after the brand name
- Hyphens added to official names
- Strange endings instead of the official domain
- Short links hiding the destination
- Pages asking for login, OTP, card, or UPI PIN
For banks, wallets, government services, and delivery companies, open the official app or type the official website yourself. Do not use a link from the message.
You can also send the URL and surrounding message to Kaval on WhatsApp for a contextual review before opening it, alongside a dedicated URL-reputation check.
Check whether the claim has a source
For news, public warnings, disasters, health claims, or political claims, look for the original source.
Good signs:
- The message links to a named source
- The same claim appears on credible news or official channels
- The date is current
- The image or video matches the claim
- The post explains where the information came from
Bad signs:
- No source
- No date
- Cropped screenshot
- “My uncle in police said”
- “Big media will not show this”
- Old photo with a new caption
- A claim that only exists on forwards and short videos
If the claim could affect money, health, travel, safety, or reputation, do not forward it until you can verify it.
Check screenshots carefully
Screenshots are easy to crop, edit, and miscaption.
Before trusting one:
- Search for the exact headline or sentence
- Check whether the logo and formatting match the real publisher
- Look for missing dates and cropped URLs
- Ask whether the screenshot could be from an old event
- Check whether the image is attached to a claim it does not prove
For a deeper checklist, read how to verify a screenshot is real.
Ask what the message wants from you
This is the fastest way to spot risk. Ignore the dramatic wording for a second and ask: what does this message want me to do?
High-risk actions include:
- Pay money
- Enter UPI PIN
- Share OTP
- Install an app
- Scan a QR code
- Call a number from the message
- Open a login link
- Forward to others
- Move money to a “safe account”
If the action is risky, verify from a separate official channel.
What to send to Kaval
Send the message, screenshot, voice note, or link to Kaval. The useful answer is the one that gets specific:
- Whether the message looks real, fake, misleading, or risky
- Which signals support that conclusion
- Whether the link is safe to open
- Whether the claim has credible support
- What to do next
For example:
Risky. This message uses a bank KYC threat and a non-official link. Do not click it. Open your bank app directly and check account notices there.
Or:
Unverified. The screenshot has no date or source, and the claim is not supported by credible reports. Do not forward it as true.
The 30-second version
Before trusting a WhatsApp message, ask:
- Who is the original source?
- Is there a date?
- Is the link official?
- Does it ask for OTP, PIN, payment, or app install?
- Is the screenshot cropped or unsourced?
- Can I verify this outside WhatsApp?
- Would sharing this cause harm if it is wrong?
If the answers are unclear, pause. A real message will still be real after you check it.