{"id":5989,"date":"2026-08-12T14:26:42","date_gmt":"2026-08-12T14:26:42","guid":{"rendered":"https:\/\/adex.com\/blog\/?p=5989"},"modified":"2026-08-12T14:26:43","modified_gmt":"2026-08-12T14:26:43","slug":"whatsapp-phishing-scam-fake-gaming-ads","status":"publish","type":"post","link":"https:\/\/adex.com\/blog\/whatsapp-phishing-scam-fake-gaming-ads\/","title":{"rendered":"[Phishing Scam Alert] Fake Gaming Ads Used to Hijack WhatsApp Accounts"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Phishing has no favorite niche. Finance, eCommerce, gaming \u2013 scammers will work with anything, as long as it helps them catch users off guard.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ADEX specialists uncovered another example of this on 20 July 2026, in campaigns running on Popunder traffic and aimed at users in India. This time, fraudsters exploited the Free Fire brand, a popular mobile shooter, to hijack WhatsApp accounts.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here is how the scheme worked, why it stood a strong chance of succeeding, and how ADEX stopped it.<\/p>\n\n\n<div class=\"toc\"><h4 class=\"toc__title\" id=\"contents\">Contents<\/h4><ul class=\"toc__list\"><li class=\"toc__list_item\"><a href=\"#the-bait-from-gaming-ad-to-prize-verification\">The Bait: From Gaming Ad To &quot;Prize Verification&quot;<\/a><\/li><li class=\"toc__list_item\"><a href=\"#the-hook-how-the-whatsapp-device-linking-scam-works\">The Hook: How the WhatsApp Device-Linking Scam Works<\/a><\/li><li class=\"toc__list_item\"><a href=\"#what-the-scammers-get\">What The Scammers Get<\/a><\/li><li class=\"toc__list_item\"><a href=\"#why-the-scheme-stood-a-chance\">Why The Scheme Stood A Chance&nbsp;<\/a><\/li><li class=\"toc__list_item\"><a href=\"#how-to-stay-safe\">How to Stay Safe<\/a><\/li><li class=\"toc__list_item\"><a href=\"#frequently-asked-questions\">Frequently Asked Questions<\/a><\/li><li class=\"toc__list_item\"><a href=\"#why-end-to-end-monitoring-matters\">Why End-to-End Monitoring Matters<\/a><\/li><\/ul><\/div><style>\n.toc {}\n.toc__title {\n      font-size: 32px;\n    line-height: 40px;\n    font-weight: 700;\n}\n.toc__list_item {\n    color: #FE645A !important;\n}\n.toc__list_item:not(:last-child){\n    margin-bottom: 5px;\n}\n.toc__list_item a {\n    font-size: 18px;\n    line-height: 24px;\n    color: #FE645A;\n    font-weight: 600;\n}\n.toc__list_item a:hover {\n    text-decoration: underline;\n}\n@media (max-width: 1023px) {.toc__title {font-size: 24px;line-height: 32px;}}\n<\/style>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"the-bait-from-gaming-ad-to-prize-verification\">The Bait: From Gaming Ad To &#8220;Prize Verification&#8221;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">ADEX specialists review any campaign that asks users for a phone number, whatever the offer looks like on the surface.&nbsp;<\/p>\n\n\n    <div class=\"block__quote\"><p class=\"block__quote_desc\"><p>The reason lies in how these offers work. To activate a subscription, users typically submit a phone number and confirm it with a code. The code usually arrives via SMS, although some advertisers use WhatsApp, Telegram, or another messenger instead. Any flow built around \u201center your number and wait for a code\u201d gives scammers a familiar script to imitate.<\/p>\n<\/p><\/div>\n    <style>.block__quote {margin: 32px 0;padding-left: 20px;border-left: 3px solid #00B8A7;}.block__quote_desc {font-weight: 700 !important;font-size: 18px !important;line-height: 28px !important;margin-bottom: 24px !important;}.block__quote_author {display: none;}<\/style>\n\n\n\n<p class=\"wp-block-paragraph\">The campaign in this case did not look like a subscription offer at all. It looked like a gaming ad.<\/p>\n\n\n    <div class=\"block__quote\"><p class=\"block__quote_desc\"><p>Pages built for this purpose are not new to the ADEX team, and earlier versions announced themselves quickly. Some carried messenger logos with an open invitation to call or message women. Others opened on a bare phone-number field with no cover story at all. The page in this case pursues the same goal behind a gaming catalog, and that is the part that makes it harder to catch at a glance.<\/p>\n<\/p><\/div>\n    <style>.block__quote {margin: 32px 0;padding-left: 20px;border-left: 3px solid #00B8A7;}.block__quote_desc {font-weight: 700 !important;font-size: 18px !important;line-height: 28px !important;margin-bottom: 24px !important;}.block__quote_author {display: none;}<\/style>\n\n\n\n<p class=\"wp-block-paragraph\">Yet, the scheme ADEX uncovered is a textbook phishing scam \u2013 built, however, with unusual care.<\/p>\n\n\n\n<p class=\"has-cyan-bluish-gray-background-color has-background wp-block-paragraph\">It starts with a landing page that looks like an ordinary gaming ad. Users arrived through Popunder traffic. The campaign&#8217;s target URL, <strong><em>engine[.]cashcatapi[.]com<\/em><\/strong>, moved them along a redirect chain that ended at <strong><em>11[.]rich<\/em><\/strong>, where the page itself was hosted.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A video with a play button sits at the top, and below it the page lists apps to install: &#8220;Old Free Fire 2017&#8221;, &#8220;Free Fire Proxy Server&#8221;, &#8220;Unlimited Diamonds And uc for Free Fire\/pubg&#8221;.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><a href=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/ADEX-Gaming-Ad-Phishing-Prize-Verification.png\" target=\"_blank\" rel=\" noreferrer noopener\"><img decoding=\"async\" width=\"287\" height=\"815\" src=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/ADEX-Gaming-Ad-Phishing-Prize-Verification.png\" alt=\"ADEX - gaming ad phishing page with fake Free Fire app downloads leading to prize verification\" class=\"wp-image-5990\" style=\"width:300px\" srcset=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/ADEX-Gaming-Ad-Phishing-Prize-Verification.png 287w, https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/ADEX-Gaming-Ad-Phishing-Prize-Verification-106x300.png 106w\" sizes=\"(max-width: 287px) 100vw, 287px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">For extra trustworthiness, each app comes with a rating, an APK size, a badge reading CLASSIC, HOT or SECURE, and a description promising unlimited access, a fast proxy connection or instant in-game currency \u2013 the kind of detail that makes the page feel like a legitimate app catalog.<\/p>\n\n\n\n<p class=\"has-cyan-bluish-gray-background-color has-background wp-block-paragraph\"><em>The wording points at a specific audience. Two of the three listings advertise a &#8220;proxy server&#8221;, one of them named for Free Fire India, and Free Fire was<\/em> <a href=\"https:\/\/techcrunch.com\/2024\/03\/07\/free-fire-india-launch\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\"><em>blocked in India in February 2022<\/em><\/a><em> alongside 53 other apps. Its return has been announced and delayed several times since, so the page appears to target players searching for a way back into the game. India is a natural target for a scheme of this kind, given how much of the country&#8217;s everyday messaging runs through WhatsApp. In December 2025, the country&#8217;s Ministry of Electronics and IT issued a public advisory on GhostPairing, the device-linking technique described below.<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Tapping the install button, however, doesn&#8217;t lead to any app store. Instead, a &#8220;<em>Verification Required<\/em>&#8221; pop-up appears: to claim a prize in a &#8220;<em>fair giveaway<\/em>&#8220;, the user supposedly needs to verify their phone number. Logging out during verification means losing the prize, and to keep the pressure on, the page adds a countdown timer and a &#8220;24 hours only&#8221; limit.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><a href=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-Fake-Gaming-App-Phone-Verification-Phishing.png\" target=\"_blank\" rel=\" noreferrer noopener\"><img decoding=\"async\" width=\"436\" height=\"874\" src=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-Fake-Gaming-App-Phone-Verification-Phishing.png\" alt=\"Adex - fake gaming app page showing a phone verification phishing pop-up\" class=\"wp-image-5991\" style=\"width:300px\" srcset=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-Fake-Gaming-App-Phone-Verification-Phishing.png 436w, https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-Fake-Gaming-App-Phone-Verification-Phishing-150x300.png 150w\" sizes=\"(max-width: 436px) 100vw, 436px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The user enters their phone number into the form.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Right after that, a second window shows up \u2013 &#8220;<em>Verification Code&#8221;<\/em>.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It displays what looks like a screenshot of a genuine WhatsApp system dialog: &#8220;<em>Are you trying to link a device? Chrome (Windows) is attempting to link to your WhatsApp account. Confirm to continue<\/em>&#8220;, complete with Confirm and Cancel buttons.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><a href=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-WhatsApp-Verification-Code-Phishing.png\" target=\"_blank\" rel=\" noreferrer noopener\"><img decoding=\"async\" width=\"430\" height=\"719\" src=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-WhatsApp-Verification-Code-Phishing.png\" alt=\"Adex - WhatsApp verification code phishing pop-up imitating a device-linking request\" class=\"wp-image-5992\" style=\"width:300px\" srcset=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-WhatsApp-Verification-Code-Phishing.png 430w, https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-WhatsApp-Verification-Code-Phishing-179x300.png 179w\" sizes=\"(max-width: 430px) 100vw, 430px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Below it sits an 8-digit code with a &#8220;Copy code&#8221; button and a note saying &#8220;<em>Paste this code in the app&#8221;<\/em>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The user has now handed over a phone number and is one tap away from giving away a confirmation. What happens between those two screens takes place on the scammers&#8217; machine.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><a href=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-WhatsApp-GhostPairing-Scam-Process.png\" target=\"_blank\" rel=\" noreferrer noopener\"><img decoding=\"async\" width=\"688\" height=\"639\" src=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-WhatsApp-GhostPairing-Scam-Process.png\" alt=\"Adex - diagram showing how a fake gaming ad leads to WhatsApp account hijacking\" class=\"wp-image-5993\" style=\"width:600px\" srcset=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-WhatsApp-GhostPairing-Scam-Process.png 688w, https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-WhatsApp-GhostPairing-Scam-Process-300x279.png 300w\" sizes=\"(max-width: 688px) 100vw, 688px\" \/><\/a><\/figure>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"the-hook-how-the-whatsapp-device-linking-scam-works\">The Hook: How the WhatsApp Device-Linking Scam Works<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The moment the victim submits a phone number on the first screen, that number reaches the scammers.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">They open WhatsApp Web or Desktop on their own machine and start linking their own browser to the victim\u2019s WhatsApp account, using the &#8220;link with phone number&#8221; option.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">WhatsApp responds the way it is designed to. It generates a pairing code for the account owner and pushes a real prompt to the victim&#8217;s phone: &#8220;<em>Are you trying to link a device?&#8221;&nbsp;<\/em><\/p>\n\n\n<div class=\"block__preview\">\n        <a href=\"https:\/\/adex.com\/blog\/phishing-alert-telegram-fraud\/\" class=\"block__preview_img\"><img src=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2025\/07\/Adex-Telegram-fraud-account-hijacking.png\" srcset=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2025\/07\/Adex-Telegram-fraud-account-hijacking.png\" sizes=\"100vw\" alt=\"Adex-Telegram-fraud-account-hijacking\" decoding=\"async\" class=\"lazy\"><\/a>\n    <div class=\"block__preview_box\">\n        <a href=\"https:\/\/adex.com\/blog\/category\/current_risks\/\" class=\"block__preview_box-cat\">Current risks<\/a>        <h3 class=\"block__preview_box-title\" id=\"phishing-scam-alert-telegram-fraud-and-account-hijacking-prevented\"><a href=\"https:\/\/adex.com\/blog\/phishing-alert-telegram-fraud\/\">[Phishing Scam Alert] Telegram Fraud and Account Hijacking Prevented<\/a><\/h3>\n    <\/div>\n<\/div>\n<style>\n.block__preview {display: flex;align-items: center;justify-content: center; margin: 32px 0;}\n.block__preview a {text-decoration: none;}\n.block__preview_img {min-width: 360px;max-width: 360px;min-height: 188px;width: 100%;height: 100%;}\n.block__preview_img img {width: 100%;height: 100%;}\n.block__preview_box {margin-left: 40px;max-width: 360px;}\n.block__preview_box-cat {color: #00B8A7 !important;font-weight: 600;font-size: 12px;line-height: 16px;text-transform: uppercase; display: block; margin-bottom: 4px;}\n.block__preview_box-cat:hover {color: #FE645A !important; text-decoration: none !important;}\n.block__preview_box-title {font-size: 20px;font-weight: 700;line-height: 24px;color: #0B172D;}\n.block__preview_box-title a {color: #0B172D !important;}\n.block__preview_box-title a:hover {color: #FE645A !important;}\n@media screen and (max-width: 768px) {.block__preview {flex-direction: column;}.block__preview_box {max-width: 100%; margin-top: 32px;margin-left: 0px;}.block__preview_img {max-width: 100%;min-width: 100%;min-height: 100%;}}<\/style>\n\n\n\n<p class=\"wp-block-paragraph\">The prompt and the code are WhatsApp&#8217;s way of asking the account owner to confirm that the request came from them \u2013 <a href=\"https:\/\/faq.whatsapp.com\/1317564962315842\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">device linking<\/a> is how every WhatsApp Web session gets connected.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The scam page anticipates the real WhatsApp prompt by reproducing the system dialog on the site and presenting it as a prize-verification step.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">By the time WhatsApp&#8217;s own prompt arrives on the phone, the user has already been told to expect it.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The 8-digit code offered with a &#8220;Copy code&#8221; button is the genuine pairing code for the scammers&#8217; browser session, and &#8220;Paste this code in the app&#8221; is the instruction that completes the takeover. Entering it inside WhatsApp registers the attacker&#8217;s browser as a trusted linked device on the victim&#8217;s account.<\/p>\n\n\n\n<p class=\"has-cyan-bluish-gray-background-color has-background wp-block-paragraph\"><em>Gen Digital researchers, who documented this technique in December 2025 under the name<\/em> <a href=\"https:\/\/www.gendigital.com\/blog\/insights\/research\/ghostpairing-whatsapp-attack\" target=\"_blank\" rel=\"noreferrer noopener nofollow\"><em>GhostPairing<\/em><\/a><em>, note that attackers favor the pairing-code flow over the QR-code one for a practical reason: a code can be entered on the same phone the victim is already holding, while scanning a QR shown on that same screen is awkward or impossible.<\/em><\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-the-scammers-get\">What The Scammers Get<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A linked device has the same reach as any WhatsApp Web session the account owner would open themselves.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The GhostPairing research lists what that covers: synced message history, new messages in real time, photos, videos and voice notes, and the personal details people share in chats: addresses, email addresses, codes and links that can be reused or resold.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-WhatsApp-Linked-Device-Data-Access.png\" target=\"_blank\" rel=\" noreferrer noopener\"><img decoding=\"async\" width=\"708\" height=\"373\" src=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-WhatsApp-Linked-Device-Data-Access.png\" alt=\"Adex - diagram showing messages and personal data accessible through a linked WhatsApp device\" class=\"wp-image-5994\" srcset=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-WhatsApp-Linked-Device-Data-Access.png 708w, https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-WhatsApp-Linked-Device-Data-Access-300x158.png 300w\" sizes=\"(max-width: 708px) 100vw, 708px\" \/><\/a><\/figure>\n\n\n\n<p class=\"has-cyan-bluish-gray-background-color has-background wp-block-paragraph\"><em>The victim&#8217;s phone keeps working normally, which is what makes this hard to notice. Linked sessions survive closed tabs and stay active until someone removes them manually in <\/em><strong><em>Settings \u2192 Linked Devices<\/em><\/strong><em>.&nbsp;<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Attackers use that window to forward the same lure into family chats, work groups, and team conversations, where a short message from a familiar contact rarely raises questions.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Each recipient who completes the linking step becomes a new source of lures, and the campaign spreads through relationships the original attacker never had access to.&nbsp;<\/p>\n\n\n\n<p class=\"has-cyan-bluish-gray-background-color has-background wp-block-paragraph\"><em>The research also warns that voice notes and photos collected this way feed later impersonation attempts, including deepfake-assisted fraud and extortion.<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CTM360 tracked a parallel campaign it calls <a href=\"https:\/\/www.ctm360.com\/reports\/hackonchat-unmasking-the-whatsapp-hacking-scam\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">HackOnChat<\/a>, reporting thousands of malicious URLs on cheap top-level domains, multilingual pages with country-code selectors, and a surge across the Middle East and Asia in late 2025. India&#8217;s Ministry of Electronics and IT issued a <a href=\"https:\/\/www.newsonair.gov.in\/meity-issues-advisory-on-ghostpairing-cyber-campaign-targeting-whatsapp-accounts\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">public advisory<\/a> on GhostPairing that December. On the platform side, Meta reported removing <a href=\"https:\/\/www.securityweek.com\/whatsapp-takes-down-6-8-million-accounts-linked-to-criminal-scam-centers-meta-says\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">6.8 million WhatsApp accounts<\/a> tied to organized scam centers in the first half of 2025 alone.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"what-whatsapp-does-about-it\">What WhatsApp Does About It<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">WhatsApp has been hardening this area for years. Linking through a QR code has <a href=\"https:\/\/www.xda-developers.com\/whatsapp-web-desktop-require-biometric-authentication-before-device-linking\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">required biometric or device-unlock confirmation<\/a> since 2021.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In 2023, the platform added<a href=\"https:\/\/blog.whatsapp.com\/new-security-features-account-protect-device-verification-automatic-security-codes\" target=\"_blank\" rel=\"noreferrer noopener nofollow\"> Account Protect and Device Verification<\/a>, which flag attempts to move an account to a new device and run background checks against compromised phones. Two-step verification adds a user-set PIN on registration, and an optional<a href=\"https:\/\/www.helpnetsecurity.com\/2026\/02\/23\/whatsapp-account-password-feature-beta\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\"> account password<\/a> appeared in beta in early 2026.<\/p>\n\n\n\n<p class=\"has-cyan-bluish-gray-background-color has-background wp-block-paragraph\"><em>These protections strengthen account security, although they do not replace the need to reject unexpected device-linking requests.<\/em><\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"why-the-scheme-stood-a-chance\">Why The Scheme Stood A Chance&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The scam was particularly sophisticated and well designed. This was one of the main reasons it could have continued operating had ADEX not intervened.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>A familiar starting point.<\/strong> The journey begins with elements users recognize: a gaming ad, an app listing, and an install button. By the time the first fraudulent step appears, they have already slipped into a familiar routine and are more likely to follow the flow than question it.<\/li>\n\n\n\n<li><strong>A real interface in a false context.<\/strong> The copied WhatsApp dialog looks convincing because it closely mirrors the genuine interface, down to the wording. The scammers preserve the trusted design but change what the prompt appears to mean, presenting a device-linking request as part of prize verification.<\/li>\n\n\n\n<li><strong>Pressure that leaves little time to think.<\/strong> The countdown, the \u201c24 hours only\u201d limit, and the threat of losing the prize push users to act before checking what is happening. The warning not to log out serves another purpose: it discourages users from opening WhatsApp settings, where they might notice an unfamiliar device-linking request.<\/li>\n\n\n\n<li><strong>A smooth verification flow.<\/strong> The 8-digit code appears as the natural next step, making the process seem legitimate from beginning to end. In reality, entering that code gives the scammers\u2019 browser access to the victim\u2019s account, but the instruction is presented as a simple final step: copy, paste, continue.<\/li>\n<\/ul>\n\n\n<div class=\"block__preview\">\n        <a href=\"https:\/\/adex.com\/blog\/ad-cloaking\/\" class=\"block__preview_img\"><img src=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/06\/Adex-Ad-Cloaking-Reviewer-User-Split.png\" srcset=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/06\/Adex-Ad-Cloaking-Reviewer-User-Split.png\" sizes=\"100vw\" alt=\"Adex - ad cloaking and reviewer-user split, showing how fraudsters serve clean pages to moderators and malicious pages to real users.\" decoding=\"async\" class=\"lazy\"><\/a>\n    <div class=\"block__preview_box\">\n        <a href=\"https:\/\/adex.com\/blog\/category\/current_risks\/\" class=\"block__preview_box-cat\">Current risks<\/a>        <h3 class=\"block__preview_box-title\" id=\"ad-cloaking-when-fraudsters-show-moderators-one-page-and-users-another\"><a href=\"https:\/\/adex.com\/blog\/ad-cloaking\/\">Ad Cloaking: When Fraudsters Show Moderators One Page and Users Another<\/a><\/h3>\n    <\/div>\n<\/div>\n<style>\n.block__preview {display: flex;align-items: center;justify-content: center; margin: 32px 0;}\n.block__preview a {text-decoration: none;}\n.block__preview_img {min-width: 360px;max-width: 360px;min-height: 188px;width: 100%;height: 100%;}\n.block__preview_img img {width: 100%;height: 100%;}\n.block__preview_box {margin-left: 40px;max-width: 360px;}\n.block__preview_box-cat {color: #00B8A7 !important;font-weight: 600;font-size: 12px;line-height: 16px;text-transform: uppercase; display: block; margin-bottom: 4px;}\n.block__preview_box-cat:hover {color: #FE645A !important; text-decoration: none !important;}\n.block__preview_box-title {font-size: 20px;font-weight: 700;line-height: 24px;color: #0B172D;}\n.block__preview_box-title a {color: #0B172D !important;}\n.block__preview_box-title a:hover {color: #FE645A !important;}\n@media screen and (max-width: 768px) {.block__preview {flex-direction: column;}.block__preview_box {max-width: 100%; margin-top: 32px;margin-left: 0px;}.block__preview_img {max-width: 100%;min-width: 100%;min-height: 100%;}}<\/style>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"how-to-stay-safe\">How to Stay Safe<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The most important rule is simple: treat any unexpected request to link a device or enter a code generated by a messenger as an attempt to take over your account.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A legitimate device-linking request should appear only after an action you initiated yourself; for example, when connecting your own computer to WhatsApp Web. A prize, giveaway, bonus, or app installation should never require access to your WhatsApp account.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>To reduce the risk:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Never approve an unexpected \u201cLink a device\u201d prompt, even if a website has primed you to expect it.<\/li>\n\n\n\n<li>Never enter or share a WhatsApp pairing code unless you are linking your own device.<\/li>\n\n\n\n<li>Ignore countdowns and warnings designed to rush you. Close the page and verify the offer independently.<\/li>\n\n\n\n<li>Check <strong>WhatsApp \u2192 Settings \u2192 Linked Devices<\/strong> regularly and remove any session you do not recognize.<\/li>\n\n\n\n<li>Enable two-step verification and protect access to your phone with biometrics or a passcode.<\/li>\n\n\n\n<li>If an unfamiliar device has already been linked, remove it immediately and warn your contacts that messages sent from your account may have been fraudulent.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"frequently-asked-questions\">Frequently Asked Questions<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"can-someone-link-a-device-to-my-whatsapp-without-me-knowing\">Can someone link a device to my WhatsApp without me knowing?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Not without an action on your side. A new device joins an account in one of two ways: someone scans a QR code from inside your WhatsApp, or someone enters a pairing code in your app. Both require your phone. What scammers can do is arrange for that action to look like something else, which is exactly what the fake prize verification in this case was built for.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"how-can-i-tell-whether-someone-else-is-reading-my-whatsapp\">How can I tell whether someone else is reading my WhatsApp?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Open WhatsApp \u2192 Settings \u2192 Linked Devices. The list shows every active session, the device or browser type, and when it was last used. An entry you do not recognize \u2013 a Chrome session on Windows you never opened, for example \u2013 is the signal to look for. Your phone will not behave differently, which is why the device list is the only reliable check. Messages marked as read before you opened them, or messages in a chat that you did not write, are worth investigating for the same reason.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"an-unknown-device-is-already-linked-what-should-i-do-beyond-removing-it\">An unknown device is already linked. What should I do beyond removing it?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Log that session out first, then turn on two-step verification so a re-registration attempt needs a PIN you set. After that, work through what the session could have seen: warn the contacts and groups that received messages from you while it was active, and treat anything shared in those chats as exposed, including codes, links, and personal details. If you shared verification codes for other services in WhatsApp, secure those accounts too. Gen Digital&#8217;s researchers also note that account restrictions applied by the platform do not consistently clear a linked session, so removing it by hand is the step that ends the access.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"why-end-to-end-monitoring-matters\">Why End-to-End Monitoring Matters<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This case also shows why proactive ad monitoring matters. The campaign did not initially look like an account-takeover attempt: it presented itself as an ordinary gaming offer and introduced the phishing steps only after the user interacted with the page.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ADEX specialists uncovered the malicious flow during a regular review of a high-risk campaign category. By examining the entire user journey, not just the first landing page, they identified the fake prize-verification process and the attempt to disguise WhatsApp device linking as a harmless confirmation step.&nbsp;<\/p>\n\n\n<div class=\"block__bord\"><div class=\"block__bord_desc\"><p><strong>The campaign was taken down, and the advertiser behind it was banned. They never came to support to dispute the decision.<\/strong><\/p>\n<\/div><\/div>\n<style>\n.block__bord { margin: 32px 0; padding: 1.25em 2.375em;\tborder-radius: 24px; background: rgba(0, 220, 200, 0.20); }\n.block__bord_desc {font-size: 16px !important;font-weight: 400 !important;color: #606060 !important;}\n<\/style>\n\n\n\n<p class=\"wp-block-paragraph\">For traffic partners, this is a reminder that checking the visible ad alone is not enough. Fraud may emerge only after several clicks, redirects, pop-ups, or form submissions. Continuous monitoring of the complete conversion path is essential, especially in categories that collect phone numbers or use messenger-based verification.<\/p>\n\n\n    <div class=\"block__buttons\">\n        <a href=\"https:\/\/app.adex.com\/auth\/login\" class=\"block__buttons_btn\">JOIN ADEX<\/a>    <\/div>\n<style>\n    .block__buttons {\n        text-align: center;\n    }\n\n    .block__buttons_btn {\n        background-color: rgba(254, 100, 90, 1) !important;\n        border-radius: 200px !important;\n        padding: 16px 24px !important;\n        font-weight: 600 !important;\n        font-size: 18px !important;\n        line-height: 24px !important;\n        text-align: center !important;\n        display: inline-block !important;\n        color: #fff !important;\n        text-decoration: none !important;\n        text-transform: uppercase !important;\n    }\n\n    .block__buttons_btn:hover {\n        color: rgba(11, 31, 58, 1) !important;\n    }\n<\/style>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Think an \u201cInstall Now\u201d button can\u2019t put your WhatsApp account at risk? See how the WhatsApp phishing scam uncovered by Adex works and learn to spot fake verification steps before scammers gain access.<\/p>\n","protected":false},"author":4,"featured_media":5998,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[4],"tags":[18,16],"class_list":["post-5989","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-current_risks","tag-fraud","tag-threat"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>WhatsApp Phishing Scam: How Device Linking Hijacks Accounts<\/title>\n<meta name=\"description\" content=\"This WhatsApp phishing scam disguises device linking as prize verification. Learn how to spot it and protect your account from takeover.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/adex.com\/blog\/whatsapp-phishing-scam-fake-gaming-ads\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"WhatsApp Phishing Scam: How Device Linking Hijacks Accounts\" \/>\n<meta property=\"og:description\" content=\"This WhatsApp phishing scam disguises device linking as prize verification. Learn how to spot it and protect your account from takeover.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/adex.com\/blog\/whatsapp-phishing-scam-fake-gaming-ads\/\" \/>\n<meta property=\"og:site_name\" content=\"ADEX\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/adexsaas\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-12T14:26:42+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-12T14:26:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-WhatsApp-Phishing-Scam-Fake-Gaming-Ads.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Kira Vessiari\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@adexsaas\" \/>\n<meta name=\"twitter:site\" content=\"@adexsaas\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kira Vessiari\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/whatsapp-phishing-scam-fake-gaming-ads\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/whatsapp-phishing-scam-fake-gaming-ads\\\/\"},\"author\":{\"name\":\"Kira Vessiari\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#\\\/schema\\\/person\\\/2bf2469195f0e5bffe2e1d5b2ef12b61\"},\"headline\":\"[Phishing Scam Alert] Fake Gaming Ads Used to Hijack WhatsApp Accounts\",\"datePublished\":\"2026-08-12T14:26:42+00:00\",\"dateModified\":\"2026-08-12T14:26:43+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/whatsapp-phishing-scam-fake-gaming-ads\\\/\"},\"wordCount\":2000,\"publisher\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/whatsapp-phishing-scam-fake-gaming-ads\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/adex.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/Adex-WhatsApp-Phishing-Scam-Fake-Gaming-Ads.png\",\"keywords\":[\"Fraud\",\"Threat\"],\"articleSection\":[\"Current risks\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/whatsapp-phishing-scam-fake-gaming-ads\\\/\",\"url\":\"https:\\\/\\\/adex.com\\\/blog\\\/whatsapp-phishing-scam-fake-gaming-ads\\\/\",\"name\":\"WhatsApp Phishing Scam: How Device Linking Hijacks Accounts\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/whatsapp-phishing-scam-fake-gaming-ads\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/whatsapp-phishing-scam-fake-gaming-ads\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/adex.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/Adex-WhatsApp-Phishing-Scam-Fake-Gaming-Ads.png\",\"datePublished\":\"2026-08-12T14:26:42+00:00\",\"dateModified\":\"2026-08-12T14:26:43+00:00\",\"description\":\"This WhatsApp phishing scam disguises device linking as prize verification. Learn how to spot it and protect your account from takeover.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/whatsapp-phishing-scam-fake-gaming-ads\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/adex.com\\\/blog\\\/whatsapp-phishing-scam-fake-gaming-ads\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/whatsapp-phishing-scam-fake-gaming-ads\\\/#primaryimage\",\"url\":\"https:\\\/\\\/adex.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/Adex-WhatsApp-Phishing-Scam-Fake-Gaming-Ads.png\",\"contentUrl\":\"https:\\\/\\\/adex.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/Adex-WhatsApp-Phishing-Scam-Fake-Gaming-Ads.png\",\"width\":1200,\"height\":628,\"caption\":\"Adex - WhatsApp phishing scam hidden behind fake gaming ads and prize verification\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/whatsapp-phishing-scam-fake-gaming-ads\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/adex.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"[Phishing Scam Alert] Fake Gaming Ads Used to Hijack WhatsApp Accounts\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/adex.com\\\/blog\\\/\",\"name\":\"ADEX - Ad Fraud & Invalid Traffic Prevention Platform\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#organization\"},\"alternateName\":\"ADEX\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/adex.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#organization\",\"name\":\"ADEX - Ad Fraud & Invalid Traffic Prevention Platform\",\"url\":\"https:\\\/\\\/adex.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/adex.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/CDD2258_copy-48-1.svg\",\"contentUrl\":\"https:\\\/\\\/adex.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/CDD2258_copy-48-1.svg\",\"width\":148,\"height\":30,\"caption\":\"ADEX - Ad Fraud & Invalid Traffic Prevention Platform\"},\"image\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/adexsaas\\\/\",\"https:\\\/\\\/x.com\\\/adexsaas\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#\\\/schema\\\/person\\\/2bf2469195f0e5bffe2e1d5b2ef12b61\",\"name\":\"Kira Vessiari\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cc59bc385c83827a6549fd86c717ef334484d083fba0e770f9b2365acdf272f2?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cc59bc385c83827a6549fd86c717ef334484d083fba0e770f9b2365acdf272f2?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cc59bc385c83827a6549fd86c717ef334484d083fba0e770f9b2365acdf272f2?s=96&d=mm&r=g\",\"caption\":\"Kira Vessiari\"},\"sameAs\":[\"https:\\\/\\\/adex.com\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/kiravessiari\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"WhatsApp Phishing Scam: How Device Linking Hijacks Accounts","description":"This WhatsApp phishing scam disguises device linking as prize verification. Learn how to spot it and protect your account from takeover.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/adex.com\/blog\/whatsapp-phishing-scam-fake-gaming-ads\/","og_locale":"en_US","og_type":"article","og_title":"WhatsApp Phishing Scam: How Device Linking Hijacks Accounts","og_description":"This WhatsApp phishing scam disguises device linking as prize verification. Learn how to spot it and protect your account from takeover.","og_url":"https:\/\/adex.com\/blog\/whatsapp-phishing-scam-fake-gaming-ads\/","og_site_name":"ADEX","article_publisher":"https:\/\/www.facebook.com\/adexsaas\/","article_published_time":"2026-08-12T14:26:42+00:00","article_modified_time":"2026-08-12T14:26:43+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-WhatsApp-Phishing-Scam-Fake-Gaming-Ads.png","type":"image\/png"}],"author":"Kira Vessiari","twitter_card":"summary_large_image","twitter_creator":"@adexsaas","twitter_site":"@adexsaas","twitter_misc":{"Written by":"Kira Vessiari","Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/adex.com\/blog\/whatsapp-phishing-scam-fake-gaming-ads\/#article","isPartOf":{"@id":"https:\/\/adex.com\/blog\/whatsapp-phishing-scam-fake-gaming-ads\/"},"author":{"name":"Kira Vessiari","@id":"https:\/\/adex.com\/blog\/#\/schema\/person\/2bf2469195f0e5bffe2e1d5b2ef12b61"},"headline":"[Phishing Scam Alert] Fake Gaming Ads Used to Hijack WhatsApp Accounts","datePublished":"2026-08-12T14:26:42+00:00","dateModified":"2026-08-12T14:26:43+00:00","mainEntityOfPage":{"@id":"https:\/\/adex.com\/blog\/whatsapp-phishing-scam-fake-gaming-ads\/"},"wordCount":2000,"publisher":{"@id":"https:\/\/adex.com\/blog\/#organization"},"image":{"@id":"https:\/\/adex.com\/blog\/whatsapp-phishing-scam-fake-gaming-ads\/#primaryimage"},"thumbnailUrl":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-WhatsApp-Phishing-Scam-Fake-Gaming-Ads.png","keywords":["Fraud","Threat"],"articleSection":["Current risks"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/adex.com\/blog\/whatsapp-phishing-scam-fake-gaming-ads\/","url":"https:\/\/adex.com\/blog\/whatsapp-phishing-scam-fake-gaming-ads\/","name":"WhatsApp Phishing Scam: How Device Linking Hijacks Accounts","isPartOf":{"@id":"https:\/\/adex.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/adex.com\/blog\/whatsapp-phishing-scam-fake-gaming-ads\/#primaryimage"},"image":{"@id":"https:\/\/adex.com\/blog\/whatsapp-phishing-scam-fake-gaming-ads\/#primaryimage"},"thumbnailUrl":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-WhatsApp-Phishing-Scam-Fake-Gaming-Ads.png","datePublished":"2026-08-12T14:26:42+00:00","dateModified":"2026-08-12T14:26:43+00:00","description":"This WhatsApp phishing scam disguises device linking as prize verification. Learn how to spot it and protect your account from takeover.","breadcrumb":{"@id":"https:\/\/adex.com\/blog\/whatsapp-phishing-scam-fake-gaming-ads\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/adex.com\/blog\/whatsapp-phishing-scam-fake-gaming-ads\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/adex.com\/blog\/whatsapp-phishing-scam-fake-gaming-ads\/#primaryimage","url":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-WhatsApp-Phishing-Scam-Fake-Gaming-Ads.png","contentUrl":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/08\/Adex-WhatsApp-Phishing-Scam-Fake-Gaming-Ads.png","width":1200,"height":628,"caption":"Adex - WhatsApp phishing scam hidden behind fake gaming ads and prize verification"},{"@type":"BreadcrumbList","@id":"https:\/\/adex.com\/blog\/whatsapp-phishing-scam-fake-gaming-ads\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/adex.com\/blog\/"},{"@type":"ListItem","position":2,"name":"[Phishing Scam Alert] Fake Gaming Ads Used to Hijack WhatsApp Accounts"}]},{"@type":"WebSite","@id":"https:\/\/adex.com\/blog\/#website","url":"https:\/\/adex.com\/blog\/","name":"ADEX - Ad Fraud & Invalid Traffic Prevention Platform","description":"","publisher":{"@id":"https:\/\/adex.com\/blog\/#organization"},"alternateName":"ADEX","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/adex.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/adex.com\/blog\/#organization","name":"ADEX - Ad Fraud & Invalid Traffic Prevention Platform","url":"https:\/\/adex.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/adex.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2022\/05\/CDD2258_copy-48-1.svg","contentUrl":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2022\/05\/CDD2258_copy-48-1.svg","width":148,"height":30,"caption":"ADEX - Ad Fraud & Invalid Traffic Prevention Platform"},"image":{"@id":"https:\/\/adex.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/adexsaas\/","https:\/\/x.com\/adexsaas"]},{"@type":"Person","@id":"https:\/\/adex.com\/blog\/#\/schema\/person\/2bf2469195f0e5bffe2e1d5b2ef12b61","name":"Kira Vessiari","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/cc59bc385c83827a6549fd86c717ef334484d083fba0e770f9b2365acdf272f2?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/cc59bc385c83827a6549fd86c717ef334484d083fba0e770f9b2365acdf272f2?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cc59bc385c83827a6549fd86c717ef334484d083fba0e770f9b2365acdf272f2?s=96&d=mm&r=g","caption":"Kira Vessiari"},"sameAs":["https:\/\/adex.com","https:\/\/www.linkedin.com\/in\/kiravessiari\/"]}]}},"_links":{"self":[{"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/posts\/5989","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/comments?post=5989"}],"version-history":[{"count":8,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/posts\/5989\/revisions"}],"predecessor-version":[{"id":6005,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/posts\/5989\/revisions\/6005"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/media\/5998"}],"wp:attachment":[{"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/media?parent=5989"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/categories?post=5989"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/tags?post=5989"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}