Hong Kong police’s CyberDefender account warns that scammers are impersonating WhatsApp support with fake security alerts, trying to persuade people to enter an eight-digit pairing code and let them take over their accounts.
A real support conversation should also display the “Official support account” system label; a blue tick without that label indicates an impersonator. Genuine WhatsApp support does not display a phone number, while an impersonating account does.
The advisory says Meta and WhatsApp will not ask for a one-time password through chat or an external website, or direct users to enter an eight-digit code in Linked Devices. It says WhatsApp will not ask for sensitive personal information, a full name, PIN or payment details.
For a suspicious conversation, CyberDefender advises people not to reply, and to report and block the account.