![\"Police-published](\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/10\/whatsapp-status-money-scam-hijacked-friend-account-police-example.webp\" "\\"\\"")
<\/figure>\nOverview<\/h2>\nA genuine account can carry a fraudulent request<\/h3>\n
The WhatsApp Status money scam uses a hijacked account to broadcast a payment request to people who already know its owner.<\/p>\n
The name, profile, phone number, and previous conversation can all look familiar. The person posting or answering may nevertheless be a criminal controlling the account.<\/p>\n
Swiss police warn<\/a> that compromised WhatsApp accounts are being used for money requests, including appeals posted through Status.<\/p>\n The image above is an illustrative example published by police. It demonstrates the payment-help pretext; it isn’t presented here as a captured victim’s private phone.<\/p>\n A post may say a payment account isn’t working and ask contacts to make a payment instead. The supposed friend promises to repay the money.<\/p>\n The request doesn’t have to sound dramatic. A temporary inconvenience can feel more believable than an extraordinary emergency, especially when helping appears easy.<\/p>\n The risk starts when you accept the account’s familiar identity as sufficient evidence. An existing chat confirms the account, not the person currently typing.<\/p>\n Singapore Police separately reported at least 128 cases and S$249,000 in losses since September 2026 involving compromised social accounts requesting financial assistance<\/a>.<\/p>\n Those Singapore figures cover the broader impersonation campaign, not specifically Status posts. They show why a familiar account’s money request deserves an independent check.<\/p>\n This warning concerns hijacked accounts and fraudulent appeals. It doesn’t mean every friend asking for help, fundraiser, or Status update is dishonest.<\/p>\n The criminal begins with access to an account other people already trust. That access lets the next request arrive under an established identity.<\/p>\n Swiss police also warn about messages containing links that can lead to further takeovers. The exact entry method can differ between incidents.<\/p>\n Don’t assume every account was stolen through the same trick. Sharing a registration code and authorizing an unfamiliar linked device are separate things to investigate.<\/p>\n What matters to a recipient is the outcome: familiar account details can remain visible while the real owner has lost control or is unaware of misuse.<\/p>\n The account owner may be another victim. Treat them as someone who needs warning and recovery help, rather than accusing them of personally requesting the fraudulent payment.<\/p>\n The account posts an appeal about a payment difficulty. In the police example, the request involves PayPal supposedly not working and repayment later.<\/p>\n Status provides a different opening from an unsolicited private message. You encounter the post while checking updates, then choose to reply because you recognize its author.<\/p>\n You may be the one who starts the conversation after seeing the post. Offering help yourself can make the resulting payment instructions feel less intrusive.<\/p>\n A broadcast also creates several possible conversations from one post. Other viewers’ private replies won’t necessarily be visible to you.<\/p>\n Don’t infer that someone else has verified it because the post has been up for a while. Viewing, replying, and confirming identity are different actions.<\/p>\n You answer the Status, and the conversation appears inside the chat you’ve used before. Old messages provide the background for a completely new request.<\/p>\n Scrolling upward can make the identity feel settled. It doesn’t tell you whether the same person is sending today’s messages.<\/p>\n Even a reassuring reply in that thread isn’t an independent check. If the account is compromised, you’re asking its current controller to vouch for themselves.<\/p>\n The same limitation applies to another WhatsApp message from the same account. Moving between Status and chat doesn’t move you outside the disputed identity.<\/p>\n Use a separate channel you already trust, such as a normal voice call to the friend’s established number. Don’t accept a replacement number from the suspicious conversation.<\/p>\n The supposed friend supplies payment instructions and describes the transfer as a temporary favor. You expect repayment because you believe you know the person asking.<\/p>\n If the recipient name differs, the payment problem can make that difference seem understandable. It still needs direct confirmation from your real friend.<\/p>\n A believable reason doesn’t verify an account number. Before paying, ask the person independently whether they made this exact request and intended this exact recipient.<\/p>\n Don’t send a small test payment as an identity check. It establishes that the destination can receive money, not that your friend controls it.<\/p>\n Likewise, a screenshot showing an alleged repayment isn’t the same as money arriving in your account. Check your own provider through its genuine app.<\/p>\n A cooperative contact may be asked for another payment, a different recipient, or help resolving another supposed processing problem. Treat each request as a new decision.<\/p>\n You don’t owe further assistance because you already sent money. Stop while you verify the original request outside the compromised conversation.<\/p>\n If a link arrives instead, don’t open it just because you’ve already been chatting. The police warning includes links used to spread account takeovers.<\/p>\n An account-recovery or voting link can expose more than the amount of the proposed favor. Never share a WhatsApp registration code to help someone receive money.<\/p>\n Close the payment conversation for a moment. Find an established contact route from your own records, rather than copying new details supplied in the request.<\/p>\n A normal voice call is useful because it takes you outside the WhatsApp conversation. If necessary, contact a mutual friend or speak in person.<\/p>\n Ask a concrete question: did they post this Status and ask you to pay that recipient? A vague question about whether they’re busy won’t resolve the request.<\/p>\n If you cannot reach them, wait. The inability to verify a payment doesn’t become a reason to send it more quickly.<\/p>\n Voice messages and photos inside the suspicious chat still come through the same account. Don’t let additional material replace a separate conversation.<\/p>\n A different writing style can raise concern, but normal spelling isn’t proof of identity. Short payment requests may contain little distinctive language to compare.<\/p>\n You can also tell the real friend what you saw without forwarding private financial details widely. They may need to warn everyone who could view the Status.<\/p>\n Contact the payment provider immediately.<\/strong> If you sent money, report an impersonation scam and ask whether the payment can be stopped, recalled, or investigated.<\/p>\n Supply the amount, time, transaction reference, recipient details, and messages. Describe whether it was a bank transfer, payment-service transaction, or another method.<\/p>\n Don’t promise yourself a refund because the fraud is clear. Available remedies depend on the payment and provider; act quickly without waiting for a guaranteed answer.<\/p>\n<\/li>\n Warn your friend through another channel.<\/strong> Explain that their account posted or sent a payment request. Ask them to check their own account access.<\/p>\n If they’re unreachable, alert a trusted mutual contact without circulating account numbers or private messages unnecessarily. The aim is to interrupt further payments.<\/p>\n Don’t ask the suspicious account to announce that it was hacked. Whoever controls it may use that conversation to reassure you or request another favor.<\/p>\n<\/li>\n Save the Status and payment conversation.<\/strong> Keep screenshots, timestamps, recipient details, and transaction confirmations. Preserve the original context before blocking or reporting.<\/p>\n If the Status disappears, your payment evidence still matters. Don’t assume disappearance means the money was recovered or that the owner regained control.<\/p>\n When warning others, redact personal identifiers and financial information. Send full evidence only through appropriate bank, platform, or police reporting channels.<\/p>\n<\/li>\n If your own account was taken over, recover it through WhatsApp.<\/strong> Follow the official compromised-account recovery instructions<\/a> on a safe device.<\/p>\n Re-register your number using the six-digit code sent to you by SMS or phone call. Never give that code to a supposed helper.<\/p>\n A two-step verification PIN may affect recovery. Follow WhatsApp’s instructions if a PIN you don’t know appears; don’t pay someone claiming they can bypass it.<\/p>\n Changing an unrelated password doesn’t by itself recover WhatsApp access. Use the account’s genuine recovery process rather than instructions sent by the intruder.<\/p>\n<\/li>\nThe excuse makes paying someone else seem helpful<\/h3>\n
Why Status changes the reach of the scam<\/h3>\n
\n
How the WhatsApp Status Money Scam Works<\/h2>\n
Step 1: Someone gains control of an existing account<\/h3>\n
Step 2: A Status post turns contacts into potential helpers<\/h3>\n
Step 3: Your reply reaches the person controlling the account<\/h3>\n
Step 4: The request redirects your money<\/h3>\n
Step 5: More requests can follow the first reply<\/h3>\n
How to Verify a Friend Without Asking the Same Account<\/h2>\n
What to Do if You Have Fallen Victim to This Scam<\/h2>\n
\n