The rise of WhatsApp scams that end up affecting bank accounts This has set off alarm bells across Spain. The Civil Guard, the National Police, and INCIBE have reiterated their warnings: criminals are using social engineering to steal profiles and, from there, pressuring the victims or their contacts to obtain money and financial data.
Meanwhile, a recent operation has focused on how these networks operate. In the second phase of 'Whatcode', the Civil Guard A 24-year-old man was arrested in Madrid who is believed to be the leader in Spain of an international cybercrime network. According to the investigation, the group controlled third-party WhatsApp accounts to commit fraud and launder money.
Police operation and official notices
Following the initial arrests in August, the Civil Guard continued to analyze “digital footprints” of the suspects: images, documents and technical traces that allowed the identification of the alleged ringleader and dismantle the structure within the national territoryThis action reinforces the warnings already issued by the authorities regarding the same phenomenon.
The National Police warn of a pattern that begins with a seemingly harmless messageThe victim clicks on a link, enters their phone number and a six-digit code received via SMS, unaware that That code is the WhatsApp verification code.In seconds, the attacker takes control of the account and can access bank details or request money from contacts.
How they steal your account and get to your money
Once inside, the scammers impersonate the victim and They manufacture credible emergencies to request Bizum payments, transfers, or card details. They may also try to recover passwords, read messages with temporary codes, and force access to online banking taking advantage of the trust in the environment.
Another growing trend is the impersonation of WhatsApp support or of entities that inspire confidenceUnder the pretext of “verifying your account” or “resolving a security issue,” they request an SMS code or urge the user to install remote access tools. If the user complies, the attacker... regains control of the profile and commits more frauds.
A method based on video calls and screen sharingThe criminal convinces the victim to show their phone; when the SMS with the verification code arrives, they see it live and use it to lock them out of their account. From there, access to conversations and contacts multiplies the ability to defraud and track financial information.
INCIBE experts point out that the success of these maneuvers It doesn't lie in violating systems, but in violating people.Social engineering exploits haste, fear, or trust to precipitate decisions and achieve codes, passwords or payments without verification.
The most common scams in Spain
The call “son in trouble” It's still very prevalent. Messages arrive pretending to be from a family member with a "broken phone," "trip abroad," or "medical emergency." After gaining trust, they ask for money via Bizum, PayPal, Revolut, Wise, or bank transfer, or even sensitive data for operating in your bankIn cases, the identity of the alleged relative is based on previously stolen WhatsApp accounts.
Impersonations of institutions have also been detected, such as the Civil Guard (Guardia Civil)with stories designed to keep the victim on edge and elicit quick responses. The initial hook might be a “Hi, can I ask you a question?” which leads to requests for codes or payments.
Older people or those with less digital experience are a priority target, because scammers rely on them bonds of trust and at the slightest suspicion of messages that appear to come from someone known. The campaigns are amplified when the attackers control a real account, which makes the a much more plausible trap.
Warning signs and how to prevent them
Before acting, stop for a second: if the message comes from an unknown numberIf they ask you for a six-digit code or pressure you to pay, be suspicious. Haste is a tool of the criminal; Always verify by phone with the person or entity that supposedly contacted you.
- Activate the two step verification from WhatsApp to add an additional PIN.
- Do not share codes that you receive via SMS or install remote access apps at the instruction of third parties.
- Avoid pressing unexpected links and double-check the URL before entering any data.
- Keep your mobile phone updated and use unique and strong passwords in all your services.
- Talk about the topic at home: to train adults and teenagers reduces the risk of falling.
What to do if your account or money has been stolen
If you lose access, try to recover it by reinstalling WhatsApp. force a new codeIf that's not possible, write to official support (support@whatsapp.com) and request temporary deactivation of your account to stop the fraudulent use.
If you notice any suspicious activity at your bank, contact the institution immediately. block cardsReverse operations if feasible and strengthen credentials. Save message screenshotsnumbers and reference codes that facilitate the analysis of the incidence.
Report the incident to the authorities as soon as possible. National Police or the Civil Guard and consult with INCIBE (017) for technical guidance. The faster you act, There are more options to limit the damage and prevent the attack from spreading to your contacts.
Impact and figures in Spain
The Interior Ministry recorded more than 211.000 cybercrimes Between January and June alone, this gives an idea of the scale of the problem. Platforms like Meta report the removal of millions of fraudulent accounts in their services, which shows a sustained pressure from scam networks that use WhatsApp to reach users' wallets.
Combining Institutional oversight, basic precautions and verification Each user's actions make a difference: being wary of links and codes, confirming via call, and enabling two-factor authentication drastically reduces the chances of a WhatsApp message being intercepted. opening the door to your bank account.
