Level 1 · 1B Phishing · Lesson 2 of 3
WhatsApp, texts, and messages that really are real
Scams by WhatsApp and text message use the same old trick: pretending to be someone you know or a company, and rushing you. The most common ones: "Hi Mom, I changed my number" followed by a request for money; "your package couldn't be delivered" with a link to pay a fee; and "you won a prize".
Serious companies don't ask for passwords, verification codes, or your full card details by message. And the code you get by text message is personal: never give it to anyone, not even someone who says they're from support.
Not everything is a trap
Being suspicious of everything is tiring, and you don't need to. A message is probably real if you were expecting it (you asked for it), if the link goes to the official domain, if it doesn't rush you or ask for secret details, and if you see the same thing when you go to the official site or app yourself. When in doubt, check through another channel; there's no need to panic.
Going deeper
Why they work
This is called social engineering: instead of breaking into a system, they trick the person. Scammers exploit urgency, fear, trust in a loved one, and authority ("I'm from the bank"). Knowing the trick gives you a pause, and that pause is your best defense.
Review questions
An unknown number messages you: "Hi Mom, I changed my number, I need you to send me money". What do you do?
Answer: Call their usual number or ask something only that person would know. Checking through another channel stops the scam. Urgency is exactly what the scammer needs.
Someone asks you for the 6-digit code you got by text message, saying it was sent "by mistake". What do you do?
Answer: Never share it: it's personal. That code is the key to your account. With it, they can get into your WhatsApp or your bank.
What makes a message more likely to be legitimate?
Answer: You were expecting it and the link goes to the official domain. A logo can be copied in a second and urgency is a red flag. What matters is that you asked for it and that it leads to the official site.