High alert! These WhatsApp messages are trying to steal your money.

WhatsApp scams are multiplying and becoming more sophisticated. From fake job offers to alleged banking problems, criminals use convincing messages to steal your data and money. We show you real-life examples and how to protect yourself.

WhatsApp has become an indispensable communication tool in the daily lives of millions of Mexicans. However, its popularity and reach have also positioned it as fertile ground for fraudsters who, through increasingly sophisticated schemes, seek to access users' personal and financial information to drain their accounts or commit other crimes. Being vigilant and understanding their tactics is the first line of defense.

Cybercriminals have adapted their strategies to exploit the immediacy and trust that users place in WhatsApp. One of the most common tactics involves sending mass messages containing fraudulent links (phishing) or directing to fake forms designed to capture confidential information. The data they seek is varied: credit or debit card numbers, expiration dates, CVV codes, online banking passwords, one-time verification codes (OTPs), and even credentials to take control of WhatsApp accounts or other social media accounts.

The lures used are diverse and appeal to different needs or emotions of the victims. The messages can be cleverly worded to simulate:

* Very attractive job offers: They usually promise remote jobs, with flexible hours and high salaries, often without requiring much experience.

* Fake prizes or sweepstakes: Announcements that the user has won a major prize (such as a new-generation phone, cash, or trips) without having participated in any real contest.

* Urgent warnings: Communications purporting to be from banks, financial institutions, or service companies, alerting users about alleged account issues, unrecognized charges, or the need to update information to avoid service suspension.

To give their scams greater credibility, scammers may use unknown phone numbers, often with international prefixes, or even impersonate people known to the victim (if they have previously hacked the account of a friend or family member) or legitimate companies. The Institute to Return Stolen Goods to the People (INDEP) has specifically warned about identity theft via WhatsApp, where fraudsters use logos and official images of institutions such as the Ministry of the Interior (SEGOB), the Ministry of Finance and Public Credit (SHCP), the SAT (Tax Administration Service), and Mexican Customs to deceive citizens.

An additional tactic to expand the reach of the scam is to include instructions in malicious messages for the recipient to forward the message to all their contacts. In this way, the scam spreads virally, reaching a much larger number of potential victims in a short period of time. The combination of social engineering (psychological manipulation) with these technical tactics makes the line between legitimate and fraudulent communication on WhatsApp increasingly blurred, requiring greater skepticism and awareness from users.

Knowing the patterns and language scammers use is crucial to identifying fraud attempts. Below are some common examples of fraudulent messages circulating on WhatsApp in Mexico:

* 1. Fake Brand Anniversary / Unexpected Prize:

* Example message: “Congratulations! [Popular brand name like Liverpool, Amazon, Nespresso] is celebrating its anniversary and is giving away [desirable product like coffee makers, cell phones, $5,000 gift cards]. Answer these 3 simple questions and win yours! This is not a giveaway; everyone who enters wins. Click here to enter: [malicious link]” (Inspired by ).

* The Federal Consumer Protection Agency (PROFECO) has issued warnings about these types of "fake events" promoted on social media and spread via WhatsApp, whose real goal is to steal personal data or money.

* 2. Job Offer Too Good to Be True:

* Sample message: "Hi, this is Human Resources from [Name of recognized international company]. We are looking for part-time, work-from-home staff with a salary of $15,000 per month. No previous experience is required. If you are interested, please send your CV to [fake email] or register here for more details: [fraudulent link]." (Inspired by ).

* 3. The Relative in Trouble (The “Son/Nephew” Scam):

* Sample message (sent from an unknown number): “Hi Mom/Aunt, it’s me, [child’s/nephew’s name]. I lost my cell phone and this is my temporary number. I have an emergency. I need you to deposit $2,800 into this account [account number] to pay for an urgent fine/repair. I’ll get it back to you as soon as I can. Please, it’s urgent.” (Inspired by ).

* 4. False Bank Alert or Account Problem:

* Example message: "BBVA/Santander/Banorte informs: An unauthorized attempt to access your online banking has been detected. To protect your account, it is necessary to verify your identity immediately. Enter the following secure link: [link that appears to be from the bank but is fake]." (Inspired by ).

* 5. Deceptive WhatsApp Verification Code Request:

* Example message (could come from a contact whose account was compromised or from a stranger): "Hi! Sorry for the inconvenience, I accidentally sent a 6-digit WhatsApp code to your number. Could you please send it to me? I need it to recover my session." Another variant: "WhatsApp is verifying accounts, you will receive an SMS with a code, please forward it to me to confirm that your account is secure." (Inspired by ). Never share this code.

* 6. False Government Aid or Social Programs:

* Example message: "Due to the current situation, the Federal Government has released new financial support for families. Register here to receive $3,500 monthly: [fraudulent link]." (Inspired by , like the "Stay at Home Program" scam.)

* 7. Impersonation of Authorities or Courier Companies:

* Example message: "SAT informs: You have an outstanding balance of $X,XXX.XX. To receive it, update your bank details at: [fake link]." Or "DHL/FedEx package held in customs. Pay the corresponding taxes at [fraudulent payment link] for its release." (Inspired by general alerts and ).

: "If a message seems suspicious or sounds too good to be true, don't touch, share, or forward it." – Official WhatsApp recommendation.

Presenting these specific examples is one of the most effective tools for users to recognize patterns and avoid falling into traps. The diversity of messages demonstrates cybercriminals' constant adaptation to different contexts and needs.

Developing a critical eye and paying attention to certain details can make the difference between being a victim and protecting yourself. Some common warning signs include:

* Unknown or Unexpected Sender: Be wary of messages from numbers not saved in your contacts, especially if they have country code areas and offer something unsolicited or that seems out of place. WhatsApp now includes indicators on messages from unknown people, indicating whether they're not a contact, whether you have groups in common, or whether the phone number is registered in another country, to help you decide how to respond.

* Poor Writing, Spelling or Grammar Errors: Many fraudulent messages, although intended to be convincing, contain spelling or grammar errors or unprofessional writing that would hardly be found in an official communication from a reputable company or government institution.

* Direct Request for Personal or Financial Information: No legitimate institution will ask you for sensitive data such as full passwords, card PINs, or security codes via a WhatsApp message.

* Sense of Urgency or Threat: Scammers often pressure their victims to act immediately, using phrases like "Offer valid today only!", "Your account will be blocked in 2 hours if you don't act!", or "Respond now or lose your benefit!" This rush is intended to prevent the victim from thinking clearly or verifying information.

* Suspicious or Shortened Links: Before clicking on any link, examine it carefully. Be wary of strange URLs that don't match the official domain of the supposed company, or that use link shorteners (such as bit.ly or ow.ly) in communications that should be formal. It's always best to type the official website address directly into your browser.

* “Too Good to Be True” Offers: If something sounds incredibly advantageous (million-dollar prizes for no effort, jobs with salaries disproportionate to the task, investments with guaranteed and extremely high returns), it is most likely a scam.

* Request to Resend Message: Be wary of messages that ask you to resend them to multiple contacts to “confirm your participation,” “activate a feature,” or “receive a prize.”

* Refusal to Verify Identity by Other Means: If a supposed acquaintance contacts you from a new number asking for urgent help (especially money) and refuses or makes excuses for not speaking on the phone or making a video call to confirm their identity, it is a big red flag.

* Lack of Verification on Business Accounts: If a supposed business account contacts you, look for the verification badge (green or blue check, depending on the platform). Although not all small businesses have this verification, its absence in a communication that raises concerns should increase your caution.

Detecting these scams relies on a combination of healthy skepticism, attention to detail, and awareness of common tactics. Users must take a proactive stance in protecting their information.

In addition to knowing how to detect fraudulent messages, it is essential to implement proactive security measures:

* Enable Two-Step Verification in WhatsApp: This feature adds a crucial layer of security. Set up a six-digit PIN that will be requested periodically and when you register your WhatsApp number on a new device. To enable it: go to WhatsApp > Settings > Account > Two-Step Verification.

* Never Share Your 6-Digit Verification Code: The SMS code you receive when you install WhatsApp or verify your number is personal and non-transferable. Never share it with anyone, even if they claim to be WhatsApp support.

* Set Your Privacy Properly: Review and adjust who can see your profile picture, Info, and statuses. You can find these options in WhatsApp > Settings > Account > Privacy.

* Be Wary and Always Verify: When faced with any suspicious message, even if it appears to be from a known contact (as their account may have been compromised), verify the authenticity of the request through an alternative means (a phone call to the person's previously saved number, for example) before taking any action, especially if it involves money or sharing sensitive information. If you're asked for money, ask for "proof of life" such as personalized videos or voice messages to ensure you're speaking to the right person.

* Report and Block Immediately: If you identify a message or contact as fraudulent, use WhatsApp's tools to report it to the platform and then block the sender. This helps WhatsApp take action against those accounts.

* Keep WhatsApp Updated: Software updates often include security patches and improvements that can protect you against new threats.

* Educate Those Around You: Share this information and tips with your family and friends, especially those who may be more vulnerable to these scams, such as older adults or those less familiar with digital technology.

Prevention and education are the most effective weapons against digital fraud.