8nzsm Staff asked 6 days ago
Recently, there is a wave of WhatsApp account takeover by hackers, what really happening?
1 Answers
Best Answer
8nzsm Staff answered 6 days ago
What’s going on?
As of 13 October 2026: Reports and user accounts point to a fresh wave of WhatsApp account takeover attempts in Zimbabwe. Reported concerns include account hijackings, SIM-swap fraud and attacks targeting WhatsApp Business accounts.
1. Verification-code theft
Someone triggers a WhatsApp registration code for your number, then tricks you into sharing it. They may register your number on their phone and lock you out.
2. SIM swapping or duplicate SIMs
Criminals impersonate a subscriber and obtain a replacement SIM. Zimbabwe has had reported cases involving fraudulent SIM replacements, WhatsApp takeovers and theft from mobile wallets or bank accounts.
3. Linked-device and QR-code scams
A victim is tricked into linking an attacker’s browser or device to their WhatsApp account. The attacker may then access messages and impersonate the victim without registering the number on another phone.
4. Business-account hijacking
After gaining access, criminals may message contacts and groups with fake investment offers, payment requests or other scams. Business accounts can be especially damaging because customers may trust messages from them.
Is Econet’s system compromised?
• Reported: Econet has warned about WhatsApp hijacking and social-engineering scams.
• Established risk: Zimbabwe has seen reported cases involving duplicate SIMs and fraudulent SIM replacements.
• Not confirmed: There is no reliable confirmation here that a single Econet database breach or leaked customer database is behind the current wave.
• Important distinction: People whose accounts are banned or suspended may be experiencing something different from people whose accounts have actually been taken over.
Remember: Receiving a WhatsApp verification code you did not request means someone may be attempting registration. It does not, by itself, prove that your account or the telecom network has been hacked.
What you should do right now
1. Enable two-step verification. In WhatsApp, go to Settings → Account → Two-step verification. Set a PIN and add a recovery email.
2. Enable a passkey if available. Check WhatsApp’s account security settings. Never share your SMS registration code or PIN with anyone.
3. Check linked devices. Go to Settings → Linked devices and log out any session you do not recognise.
4. Watch your mobile line. If your SIM suddenly loses service unexpectedly, contact your mobile operator through an official channel. Ask whether a SIM replacement or account change was made.
5. Be alert to follow-up scams. Warn friends or customers through another channel if your account is compromised. Do not send money based only on a WhatsApp message, even if it appears to come from someone you know.
As of 13 October 2026: Reports and user accounts point to a fresh wave of WhatsApp account takeover attempts in Zimbabwe. Reported concerns include account hijackings, SIM-swap fraud and attacks targeting WhatsApp Business accounts.
1. Verification-code theft
Someone triggers a WhatsApp registration code for your number, then tricks you into sharing it. They may register your number on their phone and lock you out.
2. SIM swapping or duplicate SIMs
Criminals impersonate a subscriber and obtain a replacement SIM. Zimbabwe has had reported cases involving fraudulent SIM replacements, WhatsApp takeovers and theft from mobile wallets or bank accounts.
3. Linked-device and QR-code scams
A victim is tricked into linking an attacker’s browser or device to their WhatsApp account. The attacker may then access messages and impersonate the victim without registering the number on another phone.
4. Business-account hijacking
After gaining access, criminals may message contacts and groups with fake investment offers, payment requests or other scams. Business accounts can be especially damaging because customers may trust messages from them.
Is Econet’s system compromised?
• Reported: Econet has warned about WhatsApp hijacking and social-engineering scams.
• Established risk: Zimbabwe has seen reported cases involving duplicate SIMs and fraudulent SIM replacements.
• Not confirmed: There is no reliable confirmation here that a single Econet database breach or leaked customer database is behind the current wave.
• Important distinction: People whose accounts are banned or suspended may be experiencing something different from people whose accounts have actually been taken over.
Remember: Receiving a WhatsApp verification code you did not request means someone may be attempting registration. It does not, by itself, prove that your account or the telecom network has been hacked.
What you should do right now
1. Enable two-step verification. In WhatsApp, go to Settings → Account → Two-step verification. Set a PIN and add a recovery email.
2. Enable a passkey if available. Check WhatsApp’s account security settings. Never share your SMS registration code or PIN with anyone.
3. Check linked devices. Go to Settings → Linked devices and log out any session you do not recognise.
4. Watch your mobile line. If your SIM suddenly loses service unexpectedly, contact your mobile operator through an official channel. Ask whether a SIM replacement or account change was made.
5. Be alert to follow-up scams. Warn friends or customers through another channel if your account is compromised. Do not send money based only on a WhatsApp message, even if it appears to come from someone you know.
hharvgood post. thank you
Please login or Register to submit your answer