Fake Business Accounts on WhatsApp & Messaging Apps — How to Spot Impersonation Scams

"We've detected unusual activity on your account. Please verify your identity immediately by clicking the link below."

You receive this message on WhatsApp from what appears to be your bank. The profile picture matches, the name looks official, and the message sounds urgent. But it's not your bank — it's a scammer impersonating a verified business account.

Business impersonation on messaging apps is one of the fastest-growing fraud tactics worldwide. This guide explains how these scams work, how to tell real accounts from fakes, and what to do if you're targeted.

How Fake Business Accounts Work

Scammers invest significant effort into making their fake accounts look legitimate. Here's what they do:

Brand Cloning

• Copy the exact logo, profile picture, and branding of a real company
• Use names nearly identical to the real business (e.g., "Chase Bank Support" instead of "Chase")
• Mimic the formatting and tone of official messages

Urgency Tactics

• "Your account will be suspended within 24 hours"
• "Immediate action required to prevent unauthorized access"
• "A security update is mandatory — complete it now"

Phishing Links

• Direct victims to convincing replica websites
• Harvest login credentials, personal information, and payment details
• Sometimes distribute malware through download links

Real vs. Fake: How to Tell the Difference

Feature	Legitimate Business Account	Fake Impersonation Account
Verification badge	Green checkmark (WhatsApp) or verified badge	No verification badge
Account search	Appears in official business directory	Not found or uses similar name
Message type	Expected messages you opted into	Unsolicited contact
Link domain	Official company domain (e.g., chase.com)	Suspicious shortened URLs or lookalike domains
Personal data requests	Never asks for passwords via message	Requests passwords, PINs, or OTPs
Tone	Professional and measured	Excessively urgent or threatening

What Legitimate Businesses Never Ask Via Messaging

No real company will ever send you a message asking for:

1. Your password or PIN — Banks and businesses never request passwords through chat
2. One-time verification codes — OTPs are for your use only and should never be shared
3. Photos of your ID or documents — Identity verification happens on official apps or websites
4. Remote access software installation — No legitimate company asks you to install screen-sharing tools via message
5. Immediate money transfers — Any message saying "transfer money now" is a scam

When in doubt, don't reply to the message. Instead, contact the company directly through their official website or phone number.

How to Verify and Report Fake Accounts

Verification Steps

1. Search for the business in the app's official directory — don't trust the account that messaged you
2. Check for the verification badge (green checkmark on WhatsApp)
3. Inspect any links — hover or long-press to see the actual URL before clicking
4. Visit the company's official website to confirm any promotions or alerts mentioned

Reporting

• WhatsApp: Open chat → Tap contact name → Scroll down → "Report"
• iMessage: Forward suspicious messages to 7726 (SPAM)
• FTC (US): Report at reportfraud.ftc.gov
• Action Fraud (UK): actionfraud.police.uk
• Local authorities: Contact your country's cybercrime reporting center

Share Verified Business Links Safely

When businesses need to share important URLs with customers — or when you need to send a link you know is legitimate — sending it as a plain message can look indistinguishable from a phishing attempt.

LOCK.PUB lets you create password-protected links that only authorized recipients can access. By setting an expiration time, the link automatically deactivates after a set period, clearly differentiating it from phishing links that persist indefinitely.

For business communications where trust matters, a LOCK.PUB protected link adds a layer of authentication that helps recipients confirm the sender's legitimacy.

Final Thoughts

Business impersonation scams on messaging apps are becoming increasingly sophisticated. The best defense is skepticism: always verify the sender, never click suspicious links, and never share sensitive information through chat.

If you need to share important links securely, try creating a password-protected link at LOCK.PUB. A simple setup can protect your recipients from phishing and impersonation attacks.