The National Cyber Security Centre (NCSC) has warned of an increase in WhatsApp verification code scams being deployed against users in Ireland.
It involves a scammer entering a WhatsApp user's number into the app's login screen, which results in a verification code being sent to the user as part of the app's security process.
The scammer will then contact the victim pretending to be a friend or family member.
The impersonation is possible because the scammer has already compromised the account of someone the victim knows, using the same technique.
The scammer creates a sense of urgency, asking the victim to share the verification code, making it seem like an urgent request from a trusted contact.
The victim, believing they are helping a friend or family member, may share the code without questioning the request.
Sharing the code gives the scammer full access to the victim's WhatsApp account.
"The scammer can lock the victim out of their account," the NCSC said it in its advisory.
"The compromised account can be used to further spread the scam or exploit the victim's contacts. This may lead to additional security breaches, and potential financial or personal losses," the NCSC said.
WhatsApp users are being advised to never share their verification code with anyone and to think of it as a secure password.
They are also being encouraged to enhance the security settings on their account and to be cautious of urgent requests, even if they appear to come from a known contact.
"If your account has been compromised by this scam, you can contact WhatsApp support at support@whatsapp.com for assistance," the NCSC said.
"If someone has gained unauthorised access to your account, contact An Garda Síochána through your local garda station," it added.
