How to Spot Scam Messages on WhatsApp: Red Flags & Protection

To spot a WhatsApp scam, watch for these red flags: urgency and threats (“your account will be blocked”), requests for OTPs or personal information, unsolicited job offers or prize notifications, shortened or misspelled URLs, and messages from unknown numbers. If you are unsure, forward the message to the Kaval WhatsApp assistant at +91 7200218310 and ask for a review before acting.

You get a WhatsApp message from an unknown number. It’s a job offer, or a bank warning, or a prize notification. Something about it feels slightly off, but you can’t quite pin down why.

That instinct? Trust it. WhatsApp scams have gotten disturbingly good. The days of obvious broken English and laughable “you’ve won a million dollars” messages aren’t gone, but they’re joined by AI-polished, brand-perfect fakes that could fool almost anyone on a busy morning.

Here’s what the most common scams look like, how to spot them, and what to do if one gets through.

Common Types of WhatsApp Scams

Scammers rotate tactics constantly. What works this month might flop next month, so they keep a whole playbook. These are the ones flooding Indian phones right now.

Fake Job Offers

A “recruiter” from a big-name company messages you out of nowhere. Work from home, flexible hours, great pay. All you need to do is click a link to “register” or pay a small “processing fee.”

That link either steals your information through a fake form or installs malware. The fee goes straight to the scammer. Real companies don’t charge you to apply for jobs. Ever.

KYC and Bank Verification Fraud

“Your account will be blocked unless you complete KYC verification immediately.” The message includes a link that looks like your bank’s website.

It’s not. It’s a phishing page designed to grab your login credentials, card details, or Aadhaar number. Some versions ask you to download a screen-sharing app, which gives scammers live access to your phone. The Reserve Bank of India has said this repeatedly: no bank sends KYC links via WhatsApp.

Lottery and Prize Scams

“Congratulations! You’ve won Rs 25,00,000 in the WhatsApp Lucky Draw!” Sure you did.

To “claim” the prize, you need to pay a tax or processing fee, or hand over your bank details. There’s no prize. WhatsApp doesn’t run lotteries. Amazon and Flipkart don’t hand out money to random numbers.

Investment and Trading Scams

Someone adds you to a group where people are sharing screenshots of massive stock or crypto profits. A “mentor” offers to guide you through a special trading platform.

The group members are bots or accomplices. The platform is fake, it shows made-up profits to get you to deposit more. When you try to withdraw, they demand “fees” or just vanish. These schemes have collectively stolen thousands of crores in India over the past few years.

Package Delivery Scams

“Your package couldn’t be delivered. Click here to update your address or pay a small customs fee.”

The link is a phishing page after your payment details. These spike around festival seasons and big sales when everyone’s expecting deliveries, which is exactly why they work. Use the fake delivery SMS checklist before paying any redelivery fee.

OTP and Verification Code Theft

Someone messages you saying they “accidentally” sent a verification code to your number. Could you just forward it?

That code is the OTP to register WhatsApp on the scammer’s device. Forward it and they take over your account. This is one of the most common hijack methods out there. Don’t share OTPs with anyone. Not your friend, not your bank, not anyone.

Red Flags That Reveal a Scam

Scams come in different shapes but they share DNA. Here’s what to watch for.

Urgency and Pressure

“Act within 24 hours or your account will be blocked.” Panic kills critical thinking, that’s the entire strategy. Real organizations give you reasonable time and contact you through official channels, not random WhatsApp messages.

Unknown or Suspicious Senders

Message from a number you don’t recognize, especially with a foreign country code? Be cautious. Scammers use numbers from countries where they’re harder to trace. Indian numbers can be spoofed too.

Shortened or Suspicious Links

Links using bit.ly, tinyurl, or containing misspelled domains are classic tells. amaz0n-verify.com is not Amazon. Before clicking anything, check where it actually leads. A link safety checker can verify URLs without putting you at risk.

Poor Grammar and Formatting

AI has made scam messages more polished, but plenty still have weird capitalization, awkward phrasing, or a tone that doesn’t match the brand. Official bank communications go through review. Random grammar errors in an “official” message should raise your eyebrows.

Too Good to Be True

Rs 50,000 per day for liking YouTube videos. Guaranteed 30% monthly returns. A free iPhone for a survey. Come on. If it sounds too good to be true, it is.

Requests for Personal Information or Money

No real company asks for your password, OTP, Aadhaar number, or payment through WhatsApp. Full stop. If a message asks for sensitive info or money, treat it as a scam until you’ve confirmed otherwise through official channels.

Heavily Forwarded Messages With No Source

WhatsApp marks heavily forwarded messages with a double-arrow icon. If something making a dramatic claim has been forwarded dozens of times but doesn’t cite a single verifiable source, it’s almost certainly garbage.

How to Verify a Suspicious Message

Got a message that triggers any of the above? Don’t click links. Don’t reply. Don’t forward it to your family group chat. Verify it first.

Forward It to the Kaval WhatsApp Bot

One option: forward the message to the Kaval WhatsApp assistant at +91 7200218310. Depending on the item and available checks, Kaval can:

• Review claims, is this headline real? Did this company actually announce this?
• Review link signals, is this URL consistent with the organisation it names?
• Review deepfake signals in an image or video, without treating the result as proof
• Ask about possible breach exposure and the appropriate official notification route

Just forward the suspicious message (text, image, or link) and ask for a clear explanation of the signals, evidence, and next steps available for that case. No app install is needed for the WhatsApp handoff.

Check the Sender’s Identity

If the message claims to be from a company or government agency:

1. Search for the official contact number on the organization’s actual website (type the URL yourself, never use the link in the message)
2. Call them using the number from their official website
3. Check their official social media for announcements matching the message

Search the Claim Online

Copy a distinctive phrase from the message and Google it. Scam messages go out to thousands of people at once. If it’s a known scam, you’ll find warnings from other users and news reports. Add “scam” or “fraud” to your search to surface relevant results faster.

Use Other Fact-Checking Resources

Beyond Kaval, several organizations actively debunk WhatsApp scams:

• Alt News, Indian fact-checking outlet that frequently covers WhatsApp-viral scams
• BOOM Live, Focuses on misinformation circulating in Indian messaging apps
• Google Fact Check Explorer, Searches fact-checks published by IFCN-verified organizations worldwide

For a broader look at verification tools, see our guide to the best free fact-checking tools.

What to Do If You’ve Already Been Scammed

Already clicked a link, shared information, or sent money? Move fast. Here’s the order of operations.

Step 1: Secure Your Accounts

• Change passwords for any accounts that may be compromised, email and banking first
• Enable two-factor authentication on WhatsApp (Settings > Account > Two-step verification) and everything else
• Log out of all sessions on services that support it (Gmail, Facebook, Instagram all have this in security settings)
• If the scammer had you install any screen-sharing or remote access app, uninstall it immediately

Step 2: Contact Your Bank

If you shared financial information or sent money:

• Call your bank’s fraud helpline right away, most have 24/7 fraud departments
• Block your cards if card details were shared
• File a dispute for unauthorized transactions
• Call the national cybercrime helpline at 1930 (India) within the first few hours, they can sometimes freeze the recipient’s account before the money moves

Step 3: Report the Scam

• Report the number on WhatsApp: open the chat > tap the three dots > More > Report
• File a complaint on the National Cyber Crime Reporting Portal or call 1930
• Report to your local police, bring screenshots of the conversation, transaction receipts, and the scammer’s phone number

If you are unsure where to report, follow the step-by-step guide on reporting cybercrime online in India.

Step 4: Warn Your Contacts

If your WhatsApp account was compromised, the scammer will likely message people in your contact list. Let your close contacts know through a different channel, phone call, SMS, in person, that your account was compromised and to ignore unusual messages from your number.

Step 5: Watch for Identity Theft

If you shared personal data like Aadhaar, PAN, or date of birth, keep a close eye on your accounts and credit reports for the next several months. Run an email breach check through an official notification service to see what is publicly disclosed. Kaval can help you interpret the notice or plan next steps on WhatsApp, but it is not a replacement for that service.

Protecting Yourself (and Your Family)

A few changes go a long way here.

Enable Two-Step Verification on WhatsApp

Settings > Account > Two-step verification. Set a six-digit PIN. This stops anyone from registering your WhatsApp number on another device even if they get your OTP. Takes thirty seconds and blocks the most common account takeover method.

Tighten Your Privacy Settings

• Set profile photo visibility to “My contacts” (Settings > Privacy > Profile photo)
• Set About and Last seen to “My contacts” or “Nobody”
• Turn off read receipts if you want to evaluate messages before the sender knows you’ve seen them

Scammers use your profile photo to create fake accounts impersonating you. Restricting visibility makes that much harder.

Talk to Your Family: Especially Older Relatives

Older family members get targeted disproportionately because they may not be as familiar with digital scam tactics. Have a direct conversation:

• Never share OTPs with anyone, for any reason
• Never click links in messages from unknown numbers
• Call you before acting on any message that asks for money or personal info

Save the Kaval WhatsApp number (+91 7200218310) as a contact on their phone with a clear label like “Kaval.” It gives them a simple way to ask about a suspicious message without needing to understand the technical details.

Keep WhatsApp Updated

WhatsApp regularly patches security vulnerabilities. Running an old version leaves you open to exploits that have already been fixed. Turn on automatic updates.

Leave Random Group Invitations

If someone you don’t know adds you to a group, leave. Investment scam groups and phishing schemes start this way, fake testimonials and artificial urgency create a false sense of legitimacy.

Build a Verification Habit

Rather than agonizing over every suspicious message, forward anything questionable to Kaval on WhatsApp for a review. Kaval is free to start on WhatsApp; see the pricing page for current terms.

FAQ

Can scammers hack my phone through a WhatsApp message?

Just receiving a text message can’t hack your phone. But clicking a malicious link can take you to phishing pages that steal credentials, or in rare cases, trigger an exploit that installs malware. Downloading files from scammers (especially APK files on Android) is even riskier. Don’t click links or download files from unknown senders. If you installed a file, use the fake APK scam cleanup guide. If you’re unsure about a link, run it through a link safety tool first.

Should I reply to scam messages?

No. Replying confirms your number is active, which makes you a higher-value target. Report the number, block it, delete the chat. If you want to check whether the message is a known scam, forward it to the Kaval WhatsApp bot at +91 7200218310, the original sender won’t know.

How do I report a scam on WhatsApp?

Open the chat, tap the three-dot menu (Android) or the contact name (iPhone), scroll down, select Report. WhatsApp gets the last five messages for review. Block the number from the same screen. For legal action in India, file on cybercrime.gov.in or call 1930. Keep screenshots and transaction details before reporting.

---

WhatsApp scams work because they exploit trust and the casual nature of messaging. But they follow patterns. Once you know those patterns, they’re much easier to catch.

Save the Kaval WhatsApp number +91 7200218310 and forward anything suspicious for a review. Visit kaval.chat for guides and user-reviewed handoffs covering claims, links, images, and possible data exposure.