comscore

This WhatsApp Trick Can Hijack Your Account Silently: Here’s How You Can Stay Safe

A new WhatsApp scam called GhostPairing lets attackers read chats by abusing device linking. Here’s how it works and how to stay safe.

Published By: Shubham Arora | Published: Dec 24, 2025, 12:02 AM (IST)

  • whatsapp
  • twitter
  • facebook
  • whatsapp
  • twitter
  • facebook

A new WhatsApp scam is spreading quietly, and it does not rely on stolen passwords or software flaws. The trick, called GhostPairing, abuses WhatsApp’s device-linking feature and depends entirely on user interaction to work. news Also Read: WhatsApp Bans Nearly 10 Million Indian Accounts Every Month: Government Raises Concerns Over Misuse and Lack of Transparency

In most cases, the attack starts with a message that looks harmless. Users are sent a link, often claiming to lead to a Facebook post, warning, or restricted page. After opening it, they are asked to enter their phone number and then a verification code sent to their device. What users do not realise is that this code is not unlocking content. It is being used to link another device to their WhatsApp account. news Also Read: WhatsApp Is Testing Quiz Feature For Channels: Here’s How It Works

Once that device is linked, the attacker can read messages, access chats, and stay logged in without raising obvious alarms. There is no pop-up warning saying the account has been compromised. Unless users manually check their linked devices, the takeover can go unnoticed. news Also Read: WhatsApp Gets New Layout Options In Status And 2026 Stickers Ahead Of New Year

WhatsApp has advised users to be cautious when linking new devices and to enable two-step verification in settings. The company says it is aware of device-linking scams and is looking at ways to reduce misuse of the feature on WhatsApp.

Security experts warn that scams like this tend to spread fastest after they become public. Once details circulate, more attackers copy the method before platforms manage to slow it down. That window is where users are most exposed.

How To Secure Your WhatsApp Account

There are a few basic steps users can take right now to reduce risk:

  1. Never share a WhatsApp verification code with anyone, even if the request looks official
  2. Be suspicious of links that ask for your phone number to view posts or warnings
  3. Enable two-step verification from WhatsApp settings to block unauthorised device linking
  4. Do not respond quickly to urgent or threatening messages asking for account access

Users should also check their linked devices immediately. Open WhatsApp, go to Settings, then Linked Devices. This screen shows every device currently connected to the account. If anything looks unfamiliar or outdated, tap the device and log out. There is no downside to removing a device you no longer use.

A linked device can see everything in your chats. Until this scam dies down, regularly checking linked devices is one of the simplest ways to stay ahead of it.