Messaging App Scams

Scammers used to stick to email and phone calls. Now they’re in your messaging apps — WhatsApp, Telegram, Signal, iMessage, Facebook Messenger, all of them. And because we tend to trust messages from these apps more than email (it feels more personal, more immediate), scams that land in your messages can be surprisingly effective.

Here’s what’s happening and how to protect yourself on every major platform.

---

Why Messaging Apps Are a Scammer’s Dream

Think about how you interact with email versus a text message. Email? You’re somewhat guarded. You know spam exists. You probably don’t click every link.

But a WhatsApp message? A text from an unknown number? We tend to engage differently. We respond faster. We’re less suspicious. The conversational format makes it feel like a real person reaching out — and often it is a real person, just not who they claim to be.

Messaging apps also give scammers some advantages over email:

• No spam filter — Most messaging apps have minimal filtering compared to email
• Read receipts — Scammers know when you’ve seen their message, so they can follow up with pressure
• Urgency built in — Messaging feels real-time, which naturally creates pressure to respond quickly
• Trust by association — If a message comes through the same app your family uses, it feels more legitimate
• End-to-end encryption — On platforms like Signal and WhatsApp, the scam messages can’t be detected by the platform itself

---

The “Hi Mum” / “Hi Dad” Scam

This one has moved from SMS to WhatsApp and iMessage, and it’s devastatingly effective because it exploits the one thing every parent will respond to: their child asking for help.

How it works:

1. You receive a message from an unknown number: “Hi mum, it’s me. I dropped my phone in water and this is my temporary number.”
2. You respond, and now you’re in a conversation
3. After some small talk to build trust, they say they need money urgently — a bill, rent, a car repair
4. They ask you to transfer money, often via bank transfer or a payment app
5. The “temporary number” excuse explains why it’s not their usual contact

Why it works:

The scammer doesn’t need to know your child’s name. “Hi mum” is enough. Most parents will respond with something like “Which one of my kids is this?” — and now the scammer has a name to work with. They’ll mirror whatever you give them.

How to protect yourself:

• Call your child’s real number before sending any money. Even if they say their phone is broken, try it. If they don’t answer, wait.
• Ask a question only they’d know. Not something from social media — something private.
• Agree on a family code word for situations like this. If they can’t give you the code, it’s not them.

---

Telegram Crypto and Investment Group Scams

Telegram is ground zero for cryptocurrency scams. If you’ve ever shown interest in crypto or finance online, there’s a good chance you’ve been added to a Telegram group without your consent.

The Fake Investment Group

You’re added to a group with thousands of members. An “admin” or “analyst” shares impressive trading results. Other members post screenshots of their profits. Everyone seems to be making money. You’re invited to join a platform and start trading.

The truth: the profits are fake, the screenshots are fabricated, and many of the enthusiastic “members” are either bots or paid shills. Once you deposit money, you might see fake returns on a dashboard for a while (to encourage you to deposit more), but when you try to withdraw, your money is gone.

The Fake Admin Direct Message

After joining a legitimate crypto community on Telegram, you receive a direct message from someone who appears to be a group admin. Their name and profile photo match. They offer to help you with an issue, verify your wallet, or participate in an exclusive opportunity.

The catch: Telegram usernames can look almost identical. The real admin might be @CryptoGroupAdmin, while the scammer is @CryptoGr0upAdmin (zero instead of ‘o’). Always verify by checking the actual username character by character, and know that real admins of legitimate groups almost never DM you first.

Pump-and-Dump Groups

A “signals” group tells members to buy a specific cryptocurrency at a specific time. The price surges as everyone buys in. The group leader — who bought in long before the announcement — sells at the peak. Everyone else is left holding tokens that immediately crash back down.

---

Signal Scams: Exploiting a Privacy Reputation

Signal’s reputation as the most private messaging app has, ironically, made it attractive to scammers. When someone contacts you on Signal, the implicit message is “I care about privacy and security” — which builds trust.

How scammers use Signal:

• Romance scams — After meeting on a dating app, they suggest moving to Signal “for privacy.” This also moves the conversation off the dating platform, where it could be monitored and flagged.
• Fake whistleblower or insider contacts — Claiming to have sensitive information and needing a “secure” channel to share it, ultimately leading to a financial request.
• “Wrong number” openers — A message arrives claiming to have the wrong number. If you respond, they pivot into friendly conversation and eventually into a scam — usually crypto investment or romance.

Signal’s actual privacy features are excellent. The problem isn’t the app — it’s scammers leveraging its reputation to seem more credible.

---

The Verification Code Scam

This scam works across every messaging platform, and it’s one of the most dangerous because it can give a scammer full access to your accounts.

How it works:

1. You receive a real verification code via SMS from WhatsApp, Telegram, or another service
2. Then you get a message — sometimes from someone in your contacts whose account was already compromised: “Hey, I accidentally sent my verification code to your number. Can you send it to me?”
3. If you send them the code, they can take over your account on that service

Why this works:

That verification code was for YOUR account. The scammer initiated a login or account transfer using your phone number. The code that arrived is the key to your account. By “forwarding” it, you’re handing them the keys.

---

Group Add Scams

Across WhatsApp, Telegram, and other platforms, scammers add you to groups without your permission. These groups typically involve:

• Fake job offers — “Work from home and earn $500/day” with a link to apply
• Investment opportunities — Fake crypto or forex trading groups
• Adult content — Links that lead to malware or credential-harvesting sites
• Fake giveaways — “Congratulations, you’ve won!” followed by a link to claim your “prize”

What to do: Leave the group immediately without clicking any links. Then adjust your privacy settings (covered below) to prevent strangers from adding you in the future.

---

Fake Customer Support

You post a complaint about a company on social media. Within minutes, you get a direct message on WhatsApp or Telegram from someone claiming to be their support team. They have a professional profile photo, maybe even the company logo. They ask for your account details to “resolve the issue.”

Real companies don’t find you on messaging apps after you tweet about them. Their customer support operates through official channels — their website, their app, their verified social media accounts. Anyone reaching out to you on a personal messaging app claiming to be support is almost certainly a scammer.

---

The AI Factor

Here’s what makes messaging app scams in 2025 and 2026 different from a few years ago: AI allows scammers to run convincing conversations at scale.

Previously, a scammer could only manage a handful of conversations at once. The messages often felt stilted, generic, or riddled with grammar mistakes. Now, AI tools let a single scammer maintain dozens — or hundreds — of personalized, fluent, natural-sounding conversations simultaneously.

This means:

• The “Hi Mum” scam can be run against thousands of parents at once, with each conversation feeling personal
• Romance scams that used to take weeks of clumsy texting now feature witty, emotionally intelligent responses that are much harder to detect
• Investment scams can answer detailed financial questions convincingly, making the scammer seem like a knowledgeable advisor
• Customer support impersonation sounds polished and professional because it is — it’s written by AI

The red flags haven’t changed: they still want your money, your credentials, or your verification codes. But the conversation getting you there will feel more real than ever.

---

Platform-Specific Safety Settings

WhatsApp

• Settings > Privacy > Groups — Set to “My contacts” so strangers can’t add you to groups
• Settings > Privacy > Profile photo — Set to “My contacts” to prevent scammers from using your photo
• Settings > Account > Two-step verification — Enable this. It adds a PIN that’s required when re-registering your number
• Settings > Privacy > Last seen — Consider setting to “My contacts” so scammers can’t see when you’re active

Telegram

• Settings > Privacy and Security > Groups & Channels — Set to “My contacts” to block random group adds
• Settings > Privacy and Security > Phone Number — Set “Who can see my phone number” to “Nobody” and “Who can find me by my number” to “My contacts”
• Settings > Privacy and Security > Two-step verification — Enable this
• Be cautious with bots — Telegram bots can be legitimate tools, but they can also harvest data. Don’t interact with bots you didn’t seek out

Signal

• Settings > Privacy > Phone Number — Disable “Allow others to see my phone number” and disable “Allow others to find me by my phone number”
• Settings > Account > Registration Lock — Enable this to prevent someone from re-registering your number
• Signal’s disappearing messages are a privacy feature, but be aware that scammers may enable them so their messages can’t be reviewed later as evidence

iMessage

• Settings > Messages > Filter Unknown Senders — Enable this to separate messages from people not in your contacts
• Settings > Messages > Send Read Receipts — Consider disabling so scammers don’t know you’ve seen their message
• Never tap links from unknown senders — iMessage previews can sometimes be exploited

---

Quick Checklist

• Never share verification codes with anyone — no exceptions
• If a family member messages from an “unknown number,” call their real number first
• Leave any group you were added to without your consent
• Tighten privacy settings on every messaging platform you use
• Enable two-step or two-factor verification on all messaging accounts
• Treat unknown senders in messaging apps with the same skepticism as unknown email senders
• Remember that fluent, natural-sounding messages don’t mean the sender is legitimate — AI has changed that
• Real customer support will never contact you first via personal messaging apps

---

The Common Thread

Every messaging app scam follows the same pattern underneath: someone you don’t know (or someone impersonating someone you do know) wants you to take an action — send money, share a code, click a link, join a platform. The platform changes. The story changes. But that core pattern stays the same.

When a message asks you to act, pause. Verify through a separate channel. That one habit will protect you against the vast majority of what’s out there.