Science & Tech · Cybersecurity · 6 hrs ago
Fake WhatsApp polls are being used to hijack accounts
Switzerland’s Federal Office for Cybersecurity says it has seen a new wave of WhatsApp account takeovers linked to fake polls.
The office received more than 50 reports in October 2026, and many of the attempts succeeded.
Scammers use a message from a contact whose account has already been taken over to invite people to vote in a competition.
A fake website then asks visitors to enter a six-digit WhatsApp code sent by text or scan a QR code, giving scammers access to the account.
Once inside, they can see chats, groups, photos and other information, then send the same scam to the victim’s contacts.
The office says users should never share verification codes or scan unknown QR codes, and should check suspicious requests with the sender by another means.
It also advises setting a WhatsApp PIN; if an account is compromised, users should warn contacts and log out unknown linked devices or register again with their phone number.
Switzerland’s Federal Office for Cybersecurity says a renewed wave of WhatsApp account hijackings is using fake polls and competition links.
The office received more than 50 reports of this method in October 2026, and many of the reported attacks succeeded.
Victims are asked by a contact whose account has already been compromised to vote through a link.
Fake websites then trick users into entering WhatsApp’s six-digit verification code or scanning a QR code that links an attacker’s device.
The office advises people not to share verification codes, to avoid QR codes from unknown websites and to protect accounts with a PIN.
- Who
- Criminals are targeting WhatsApp users through messages sent from compromised contacts.
- What
- Fake poll links are used to steal access to accounts or connect an attacker’s device.
- When
- The BACS reported a renewed wave in October 2026.
- Where
- WhatsApp; the reports were received by Switzerland’s Federal Office for Cybersecurity.
- Why
- Not stated
This story does not have two clearly opposing sides.
The BACS had previously reported the attack method.
The BACS received more than 50 reports about the method, many involving successful attacks.
The BACS published a warning about fake WhatsApp polls.
SRF published an article describing the scam and the BACS’s advice.
- Reports in October 2026
- More than 50
- Verification code
- Six digits
- Attack methods
- Enter a WhatsApp code on a fake website or scan a QR code
- Protective measure
- Enable a PIN through WhatsApp’s two-step verification
- Source agency
- Switzerland’s Federal Office for Cybersecurity
3 sources
What people are saying
Hello, vote for my friend’s daughter, it would really help them. Her name is Sophie. The vote ends soon, it takes less than a minute.