Key takeaways
- Hong Kong police linked about 150 WhatsApp account takeovers to HK$26 million in losses.
- Scammers can use AI-made voice clips to sound like a victim’s friend or relative.
- Never share a WhatsApp login code, even with someone you think you know.
- Two-step verification adds a second lock to a WhatsApp account.
Hong Kong police have raised an alert after a wave of account takeovers. WhatsApp hijacking scams are frauds where criminals seize an account and pretend to be its owner. About 150 cases led to HK$26 million in losses. The crooks may now use AI-made voices to make their lies sound more real.
What are WhatsApp hijacking scams?
WhatsApp hijacking scams start when a criminal gets control of someone’s chat account. They can then message that person’s family, friends, or workmates. Since the messages arrive from a familiar account, people may trust them too quickly.
The scammer often asks for money, gift cards, or a bank transfer. They may claim there is an urgent problem. For example, they might say a friend needs cash after an accident. A rushed request is a warning sign, not proof.
Police said the reported Hong Kong cases caused HK$26 million in total losses. That is about HK$173,000 per case on average. Actual losses differed widely, because some victims sent small sums while others made large transfers.
Hong Kong reported scam figuresPolice alert: WhatsApp account takeoversReported cases150Reported lossesHK$26mSource: Hong Kong police figures reported in the alert
How are AI voices changing WhatsApp hijacking scams?
Artificial intelligence, or AI, is software that finds patterns and creates new content. A voice-cloning tool can copy parts of a person’s voice from short recordings. It can then make a fake message that sounds surprisingly close to that person.
That tool adds pressure to an old trick. A victim may hear what sounds like a cousin or colleague asking for help. But a familiar voice is no longer enough to prove who is speaking.
Criminals may first try to steal a WhatsApp verification code. This code is a six-digit number used to sign into an account. They can claim they sent it by mistake, but WhatsApp says users should never share it.
Once inside, the crook can read recent chats and copy the owner’s style. That makes a fake money request seem more believable. The best defence is simple: stop, call the person on a known number, and check.
How large were the Hong Kong losses?
The reported HK$26 million equals roughly US$3.3 million. The 150 cases show how quickly a scam can spread through personal contact lists. One stolen account can give criminals many possible targets within minutes.
| Measure | Figure | What it shows |
|---|---|---|
| Reported hijacking cases | About 150 | A broad account-takeover problem |
| Total reported losses | HK$26 million | Money sent to fraudsters |
| Average loss per case | About HK$173,000 | A simple total divided by cases |
These figures cover reports received by police, not every scam attempt. Many people spot the trick before paying. Others may feel embarrassed and never report it, so the real number could be higher.
Hong Kong residents can check official warning advice from the Hong Kong Police Force. The force urges people to pause before moving money. It also asks people to report suspected fraud quickly.
How can people protect a WhatsApp account?
Turn on two-step verification in WhatsApp’s settings. Two-step verification means you set a private PIN as an extra check. It can stop a thief who has only managed to get your login code.
Also add an email address for recovery, then protect that email with a strong password. Use a different password for each important account. A password manager can store those passwords safely, so you do not need to memorise them.
Never give anyone a verification code sent by text. Don’t act on a voice note alone either. Make a fresh call to the person, ask a question only they would know, and verify the request.
WhatsApp also sets out account-safety steps in its official two-step verification guidance. If an account seems stolen, warn contacts fast. That could stop the next person from sending money.
What should you do after a suspected takeover?
Try to log back into WhatsApp with your phone number right away. This can sign the other user out. Then tell friends and family through another channel that messages from the account may be fake.
Save screenshots, phone numbers, payment details, and voice notes. Contact your bank immediately if money was sent. Fast action may help the bank trace or freeze a transfer before the cash moves on.
FAQs
How do WhatsApp hijacking scams steal an account?
They often trick a user into sharing a six-digit login code. Once the criminal enters that code, they can take over the account and message its contacts.
What should I do if a friend sends an urgent money request?
Call the friend using a number you already have. Do not rely on the WhatsApp chat or a voice note, because both could be controlled by a scammer.
Why are AI voice scams hard to spot?
AI can copy a voice from recordings posted online or shared in chats. That is why people should verify money requests through a second, trusted method.
Get the day’s top stories in your inbox
One concise email. No spam, unsubscribe anytime.
