“Vote for my child”: The new scam used to steal WhatsApp accounts – Police issue warning

A new type of digital fraud is rapidly spreading through WhatsApp and other messaging apps. The National Police have warned that it is a highly effective scam, mainly because it exploits the trust between friends, relatives, or coworkers.

The scam begins with a seemingly harmless message: “Can you vote for my child?”, usually followed by a link that appears legitimate. The victim, trusting the sender, clicks on the link without realizing they are about to hand over control of their WhatsApp account.

How does this scam work?

1. You receive a message from someone you know: A friend, relative, or colleague asking for help in a supposed school or children’s contest.
2. A fake link is included: It leads to a website that looks professional and trustworthy.
3. It asks you to enter your phone number: To “confirm your vote.”
4. It then requests a six-digit code sent to your phone by SMS: This code is actually your WhatsApp verification code.
5. Account takeover: Once the code is entered on the fake site, scammers activate your WhatsApp on another device and block you from accessing your own account.

After gaining control, criminals use your profile to send the same message to more contacts and may also request money, personal data, or additional verification codes.

Why is it so dangerous?

• It spreads quickly, leveraging trust between contacts.
• It doesn’t immediately ask for money, lowering the victim’s guard.
• It gives access to private conversations and allows scammers to request bank transfers using your identity.
• It creates a domino effect: Each hacked account generates new victims.

How to protect yourself: Tutorial to avoid sending the code to scammers

1. If you receive a message like “Vote for my child”, DO NOT:

• Click the link.
• Enter your phone number.
• Share any code you receive by SMS.

2. What to do if someone asks you for a code via WhatsApp or SMS

Step-by-step response:

1. Ignore the request.
2. Call or send a voice note to the contact to confirm if they actually sent it.
   In many cases, their account has already been hacked.
3. Never write or forward the 6-digit code, even if the explanation sounds urgent or convincing.

Useful reply you can send:
«I can’t send you any verification code. If you need something, call me and we’ll talk.»

3. Enable two-step verification on WhatsApp (extra protection):

1. Open WhatsApp.
2. Go to Settings > Account > Two-step verification.
3. Tap Enable.
4. Set a 6-digit PIN only you know.
5. Add an email address for recovery in case you forget the PIN.

This adds a second layer of security: even if someone gets your SMS verification code, they cannot access your account without this PIN.

4. If your account has already been stolen:

• Send an email to support@whatsapp.com with the message: “Stolen account. Please deactivate.” and include your phone number with country code (+1, +44, +34, etc.).
• Reinstall WhatsApp on your phone and try to verify your number again (this kicks the scammer out).
• Inform your contacts so they don’t fall for the scam too.

The “Vote for my child” scam doesn’t rely on sophisticated technology—it relies on something much simpler: trust between people. That’s why it works so well. The best defense is prevention.
Remember: never share any verification code. With anyone. Ever.