How to Spot Scam Messages on WhatsApp: Red Flags & Protection
To spot a WhatsApp scam, watch for these red flags: urgency and threats (“your account will be blocked”), requests for OTPs or personal information, unsolicited job offers or prize notifications, shortened or misspelled URLs, and messages from unknown numbers. To verify any suspicious message instantly, forward it to the Kaval WhatsApp bot at +91 7200218310 for a free verdict.
You get a WhatsApp message from an unknown number. It’s a job offer, or a bank warning, or a prize notification. Something about it feels slightly off, but you can’t quite pin down why.
That instinct? Trust it. WhatsApp scams have gotten disturbingly good. The days of obvious broken English and laughable “you’ve won a million dollars” messages aren’t gone, but they’re joined by AI-polished, brand-perfect fakes that could fool almost anyone on a busy morning.
Here’s what the most common scams look like, how to spot them, and what to do if one gets through.
Common Types of WhatsApp Scams
Scammers rotate tactics constantly. What works this month might flop next month, so they keep a whole playbook. These are the ones flooding Indian phones right now.
Fake Job Offers
A “recruiter” from a big-name company messages you out of nowhere. Work from home, flexible hours, great pay. All you need to do is click a link to “register” or pay a small “processing fee.”
That link either steals your information through a fake form or installs malware. The fee goes straight to the scammer. Real companies don’t charge you to apply for jobs. Ever.
KYC and Bank Verification Fraud
“Your account will be blocked unless you complete KYC verification immediately.” The message includes a link that looks like your bank’s website.
It’s not. It’s a phishing page designed to grab your login credentials, card details, or Aadhaar number. Some versions ask you to download a screen-sharing app, which gives scammers live access to your phone. The Reserve Bank of India has said this repeatedly: no bank sends KYC links via WhatsApp.
Lottery and Prize Scams
“Congratulations! You’ve won Rs 25,00,000 in the WhatsApp Lucky Draw!” Sure you did.
To “claim” the prize, you need to pay a tax or processing fee, or hand over your bank details. There’s no prize. WhatsApp doesn’t run lotteries. Amazon and Flipkart don’t hand out money to random numbers.
Investment and Trading Scams
Someone adds you to a group where people are sharing screenshots of massive stock or crypto profits. A “mentor” offers to guide you through a special trading platform.
The group members are bots or accomplices. The platform is fake — it shows made-up profits to get you to deposit more. When you try to withdraw, they demand “fees” or just vanish. These schemes have collectively stolen thousands of crores in India over the past few years.
Package Delivery Scams
“Your package couldn’t be delivered. Click here to update your address or pay a small customs fee.”
The link is a phishing page after your payment details. These spike around festival seasons and big sales when everyone’s expecting deliveries — which is exactly why they work. Use the fake delivery SMS checklist before paying any redelivery fee.
OTP and Verification Code Theft
Someone messages you saying they “accidentally” sent a verification code to your number. Could you just forward it?
That code is the OTP to register WhatsApp on the scammer’s device. Forward it and they take over your account. This is one of the most common hijack methods out there. Don’t share OTPs with anyone. Not your friend, not your bank, not anyone.
Red Flags That Reveal a Scam
Scams come in different shapes but they share DNA. Here’s what to watch for.
Urgency and Pressure
“Act within 24 hours or your account will be blocked.” Panic kills critical thinking — that’s the entire strategy. Real organizations give you reasonable time and contact you through official channels, not random WhatsApp messages.
Unknown or Suspicious Senders
Message from a number you don’t recognize, especially with a foreign country code? Be cautious. Scammers use numbers from countries where they’re harder to trace. Indian numbers can be spoofed too.
Shortened or Suspicious Links
Links using bit.ly, tinyurl, or containing misspelled domains are classic tells. amaz0n-verify.com is not Amazon. Before clicking anything, check where it actually leads. A link safety checker can verify URLs without putting you at risk.
Poor Grammar and Formatting
AI has made scam messages more polished, but plenty still have weird capitalization, awkward phrasing, or a tone that doesn’t match the brand. Official bank communications go through review. Random grammar errors in an “official” message should raise your eyebrows.
Too Good to Be True
Rs 50,000 per day for liking YouTube videos. Guaranteed 30% monthly returns. A free iPhone for a survey. Come on. If it sounds too good to be true, it is.
Requests for Personal Information or Money
No real company asks for your password, OTP, Aadhaar number, or payment through WhatsApp. Full stop. If a message asks for sensitive info or money, treat it as a scam until you’ve confirmed otherwise through official channels.
Heavily Forwarded Messages With No Source
WhatsApp marks heavily forwarded messages with a double-arrow icon. If something making a dramatic claim has been forwarded dozens of times but doesn’t cite a single verifiable source, it’s almost certainly garbage.
How to Verify a Suspicious Message
Got a message that triggers any of the above? Don’t click links. Don’t reply. Don’t forward it to your family group chat. Verify it first.
Forward It to the Kaval WhatsApp Bot
Fastest option: forward the message to the Kaval WhatsApp bot at +91 7200218310. Kaval’s AI checks it against 145+ trusted sources and comes back with a verdict in seconds. It can:
- Verify claims — is this headline real? Did this company actually announce this?
- Check links — is this URL safe or a known phishing page?
- Detect deepfakes — is this image or video AI-generated?
- Scan for breaches — has an email been leaked?
Just forward the suspicious message (text, image, or link) and you get a clear verdict: true, false, misleading, or unverifiable, with sources. No app to install. Works right inside WhatsApp.
Check the Sender’s Identity
If the message claims to be from a company or government agency:
- Search for the official contact number on the organization’s actual website (type the URL yourself — never use the link in the message)
- Call them using the number from their official website
- Check their official social media for announcements matching the message
Search the Claim Online
Copy a distinctive phrase from the message and Google it. Scam messages go out to thousands of people at once. If it’s a known scam, you’ll find warnings from other users and news reports. Add “scam” or “fraud” to your search to surface relevant results faster.
Use Other Fact-Checking Resources
Beyond Kaval, several organizations actively debunk WhatsApp scams:
- Alt News — Indian fact-checking outlet that frequently covers WhatsApp-viral scams
- BOOM Live — Focuses on misinformation circulating in Indian messaging apps
- Google Fact Check Explorer — Searches fact-checks published by IFCN-verified organizations worldwide
For a broader look at verification tools, see our guide to the best free fact-checking tools.
What to Do If You’ve Already Been Scammed
Already clicked a link, shared information, or sent money? Move fast. Here’s the order of operations.
Step 1: Secure Your Accounts
- Change passwords for any accounts that may be compromised — email and banking first
- Enable two-factor authentication on WhatsApp (Settings > Account > Two-step verification) and everything else
- Log out of all sessions on services that support it (Gmail, Facebook, Instagram all have this in security settings)
- If the scammer had you install any screen-sharing or remote access app, uninstall it immediately
Step 2: Contact Your Bank
If you shared financial information or sent money:
- Call your bank’s fraud helpline right away — most have 24/7 fraud departments
- Block your cards if card details were shared
- File a dispute for unauthorized transactions
- Call the national cybercrime helpline at 1930 (India) within the first few hours — they can sometimes freeze the recipient’s account before the money moves
Step 3: Report the Scam
- Report the number on WhatsApp: open the chat > tap the three dots > More > Report
- File a complaint on the National Cyber Crime Reporting Portal or call 1930
- Report to your local police — bring screenshots of the conversation, transaction receipts, and the scammer’s phone number
If you are unsure where to report, follow the step-by-step guide on reporting cybercrime online in India.
Step 4: Warn Your Contacts
If your WhatsApp account was compromised, the scammer will likely message people in your contact list. Let your close contacts know through a different channel — phone call, SMS, in person — that your account was compromised and to ignore unusual messages from your number.
Step 5: Watch for Identity Theft
If you shared personal data like Aadhaar, PAN, or date of birth, keep a close eye on your accounts and credit reports for the next several months. Run an email breach check to see if your information has shown up in known data leaks. Kaval’s breach scanner can check if your email has been exposed.
Protecting Yourself (and Your Family)
A few changes go a long way here.
Enable Two-Step Verification on WhatsApp
Settings > Account > Two-step verification. Set a six-digit PIN. This stops anyone from registering your WhatsApp number on another device even if they get your OTP. Takes thirty seconds and blocks the most common account takeover method.
Tighten Your Privacy Settings
- Set profile photo visibility to “My contacts” (Settings > Privacy > Profile photo)
- Set About and Last seen to “My contacts” or “Nobody”
- Turn off read receipts if you want to evaluate messages before the sender knows you’ve seen them
Scammers use your profile photo to create fake accounts impersonating you. Restricting visibility makes that much harder.
Talk to Your Family — Especially Older Relatives
Older family members get targeted disproportionately because they may not be as familiar with digital scam tactics. Have a direct conversation:
- Never share OTPs with anyone, for any reason
- Never click links in messages from unknown numbers
- Call you before acting on any message that asks for money or personal info
Save the Kaval WhatsApp bot (+91 7200218310) as a contact on their phone with a clear label like “Scam Checker.” It gives them a one-step way to verify suspicious messages without needing to understand the technical details.
Keep WhatsApp Updated
WhatsApp regularly patches security vulnerabilities. Running an old version leaves you open to exploits that have already been fixed. Turn on automatic updates.
Leave Random Group Invitations
If someone you don’t know adds you to a group, leave. Investment scam groups and phishing schemes start this way — fake testimonials and artificial urgency create a false sense of legitimacy.
Build a Verification Habit
Rather than agonizing over every suspicious message, just forward anything questionable to Kaval for a quick check. During Early Access, signed-in web users get the full Kaval experience for free, including family safety and monitoring features while the product is tested.
FAQ
Can scammers hack my phone through a WhatsApp message?
Just receiving a text message can’t hack your phone. But clicking a malicious link can take you to phishing pages that steal credentials, or in rare cases, trigger an exploit that installs malware. Downloading files from scammers (especially APK files on Android) is even riskier. Don’t click links or download files from unknown senders. If you installed a file, use the fake APK scam cleanup guide. If you’re unsure about a link, run it through a link safety tool first.
Should I reply to scam messages?
No. Replying confirms your number is active, which makes you a higher-value target. Report the number, block it, delete the chat. If you want to check whether the message is a known scam, forward it to the Kaval WhatsApp bot at +91 7200218310 — the original sender won’t know.
How do I report a scam on WhatsApp?
Open the chat, tap the three-dot menu (Android) or the contact name (iPhone), scroll down, select Report. WhatsApp gets the last five messages for review. Block the number from the same screen. For legal action in India, file on cybercrime.gov.in or call 1930. Keep screenshots and transaction details before reporting.
WhatsApp scams work because they exploit trust and the casual nature of messaging. But they follow patterns. Once you know those patterns, they’re much easier to catch.
Save the Kaval WhatsApp bot number +91 7200218310 and forward anything suspicious for an instant verdict. Or visit kaval.chat to verify claims, check links, detect deepfakes, and scan for data breaches — free.