Hyderabad: The Telangana Cyber Security Bureau (TGCSB) and the Malkajgiri Police Commissionerate have issued fresh public advisories on a sharp rise in WhatsApp account takeover scams. The frauds let cybercriminals hijack accounts by tricking users into sharing verification OTPs or codes. The advisories were issued on November 15, 2026.
Fraudsters usually try to register the victim’s WhatsApp account on another device using the victim’s mobile number. They then contact the user through fake messages, calls or links. They often pose as WhatsApp support, bank officials, delivery agents or known contacts. They urgently ask for the six-digit verification OTP or a pairing code. Once the code is shared, the attackers gain full control of the account.
A related method is called “Ghost Pairing”. Criminals secretly link their own devices to the account without logging the victim out. This lets them watch chats while the app keeps working normally on the original phone. After a takeover, criminals often message the victim’s contacts, ask for money or spread more scams.
Other methods are also in use. Fraudsters circulate malicious APK files disguised as bank KYC updates, RTA challans or courier invoices. These files steal OTPs and SMS messages. Some users, especially on iPhones, are convinced to dial call-forwarding codes that redirect messages to the fraudster.
Police and the TGCSB have listed these precautions:
- Never share your WhatsApp OTP, verification code or pairing code with anyone, even if the request seems to come from a trusted contact or official source.
- Enable Two-Step Verification (2FA) on WhatsApp.
- Check the “Linked Devices” section in WhatsApp settings regularly and remove unknown or suspicious devices at once.
- Avoid clicking unfamiliar links, installing APK files received on WhatsApp, or dialling codes given by unknown callers.
- Be careful with urgent messages claiming your account is compromised or that a code was sent by mistake.
The Malkajgiri Police advisory was issued under Commissioner of Police B. Sumathi, IPS. It backs the wider TGCSB campaign, which has earlier warned about Ghost Pairing attacks, malicious APKs and related WhatsApp hijacks. The bureau, headed by Director Shikha Goel, IPS, has repeatedly stated that no genuine organisation, including WhatsApp, banks or government agencies, will ask for OTPs over calls or messages.
Citizens who suspect a compromise should check linked devices, log out of all sessions if possible and change related passwords. In case of financial loss, they should report it at once by dialling the national cybercrime helpline 1930 or filing a complaint at www.cybercrime.gov.in. Authorities say prompt reporting within the first hour significantly improves the chances of freezing fraudulent transactions, and they have urged the public to treat any unsolicited request for an OTP as a red flag.
