WhatsApp Impersonation Scams — How Fraudsters Trick You Into Sending Money

"Hi Mom, I dropped my phone in water and this is my new number. Can you send me $500 urgently? I need to pay for something right now." This message has cost families around the world hundreds of millions of dollars. It is called the "Hi Mum" scam, and it works devastatingly well.

In the UK alone, Action Fraud reported over 25,000 cases of messenger impersonation fraud in 2025. In the US, the FTC flagged impersonation scams as the number one fraud category. The platform of choice? WhatsApp, iMessage, and Messenger — wherever your family communicates.

How the Scam Works

Step 1: Information Gathering

Scammers collect information from social media profiles, data breaches, or previous phishing attacks to identify family relationships and contact details.

Step 2: Creating the Fake Identity

They create a new WhatsApp account using a different phone number but copy the target's profile photo, name, and sometimes status message.

Step 3: The Approach

Stage	Scammer Message	Purpose
1	"Hi Mom/Dad, this is my new number"	Justify the unknown number
2	"My old phone broke / got stolen"	Explain why they cannot call
3	"I need money urgently for rent/bill"	Create urgency
4	"Can you transfer to this account?"	Direct to a mule account
5	"I can't call right now, in a meeting"	Prevent voice verification

Step 4: Escalation

Once the first transfer succeeds, they request more: "Actually, I need another $300 for the late fee." Each amount feels small enough to not question.

Real Examples

The "Hi Mum" Scam (UK/Australia)

A mother received a WhatsApp message from her "daughter" explaining her phone was broken. Over two days, she transferred over $3,000 for "rent" and "an emergency bill" before the real daughter called.

Gift Card Variant (US)

"Dad, I need you to buy $200 in Apple gift cards for a work event. Can you send me the codes?" Gift card codes are untraceable once redeemed — this is always a scam.

Boss Impersonation

Scammers impersonate a manager on WhatsApp: "I need you to process an urgent payment. I will reimburse you tomorrow." Employees, eager to please their boss, comply without verification.

How to Spot the Scam

Red Flags

1. New number with no warning — real family members usually mention a number change in advance
2. Refuses phone or video calls — "I can't talk right now" is always suspicious
3. Urgency pressure — "I need this in the next hour"
4. Unknown bank account — the account name does not match your family member
5. Requests for gift cards — legitimate people never ask for gift card codes via text

The One Rule That Stops 99% of These Scams

Call the person on their original number. That is it. If your "child" texts from a new number asking for money, call the old number. If it goes to voicemail, wait. Do not transfer money based solely on a text message.

Prevention Measures

Set Up a Family Code Word

Agree on a secret word or question that only your family knows. When someone requests money, ask for the code word first.

You can store your family's verification questions securely using LOCK.PUB. Create an encrypted memo with your family code words and share the password only with family members. Unlike a WhatsApp message that could be seen if a phone is lost, the encrypted memo requires a password to access.

WhatsApp Security Settings

• Two-step verification: Settings → Account → Two-step verification
• Profile photo visibility: Set to "My Contacts" only
• About/Status: Limit to contacts only
• Groups: Restrict who can add you to groups

Educate Vulnerable Family Members

Parents and grandparents are the primary targets. Have an explicit conversation:

• "If I ever text asking for money from a new number, call my real number first"
• "I will never ask for gift card codes via text"
• "If it feels urgent and unusual, it is probably a scam"

What to Do If You Have Been Scammed

Immediate Actions (Golden Hour)

1. Contact your bank: Request a payment recall immediately — time is critical
2. Report to police: File a report with local law enforcement
3. Report to the platform: Report the fake WhatsApp account
4. FTC report (US): reportfraud.ftc.gov
5. Action Fraud (UK): actionfraud.police.uk

Follow-Up

1. Preserve evidence: Screenshot all messages and transaction records
2. Alert family: The scammer may target other family members using the same approach
3. Monitor accounts: Watch for unauthorized transactions in the following weeks

Sharing Sensitive Family Information Safely

Bank details, emergency contacts, insurance information — families need to share sensitive data. Sending it in a regular WhatsApp chat means it lives on every device in the conversation, vulnerable to phone theft or account compromise.

With LOCK.PUB, you can create an encrypted chat room or secret memo that requires a password to access. Set an expiration time, and the information disappears automatically. End-to-end encryption means even the server cannot read the content.

Bottom Line

Messenger impersonation scams exploit trust, not technology. The scammers know that a parent will not hesitate to help their child in an emergency. The single most effective defense is simple: always call the original number before sending money.

For securely sharing family verification codes and sensitive information, use LOCK.PUB — free, encrypted, and self-destructing.