WhatsApp users targeted by ‘ghost pairing’ scam that hijacks accounts via fake voting link
A bogus voting message prompting phone-number verification has let scammers link to victims' WhatsApp accounts through the app’s multi-device feature.
In the past few days a phishing campaign has been circulating among WhatsApp users in the Netherlands, inviting them to vote for a girl named Eliska in a fictitious dance-lesson competition. The message contains a link to a spoof voting site that requests the recipient’s phone number; after entering it, a verification code is sent, allowing the attacker to pair the victim’s WhatsApp account to a device they control. Through WhatsApp’s multi-device capability, the fraudster can read all chats, send messages, and even log the genuine user out, a technique dubbed “ghost pairing.”
Authorities and cybersecurity firms such as the Fraudehelpdesk, Gen Digital, and police in Germany have highlighted the danger, noting that the scam can expose personal contacts, passwords and photos, and may be used for further fraud. Victims are advised to check linked devices in WhatsApp settings and remove any unknown entries, or reinstall the app to regain control. The incident coincides with a government campaign warning against online scams, underscoring the need for caution when clicking links.
