ECONET Wireless has urged customers to strengthen the security of their WhatsApp accounts amid concerns over account takeovers affecting some users, especially business account holders.
Some WhatsApp users in Zimbabwe, particularly those using Econet numbers, have taken to social media to report being locked out of their accounts.
Some users claim they lost access to their accounts despite not clicking on suspicious links, raising concerns about how scammers are gaining control of WhatsApp accounts.
In a warning posted on its official facebook page, Econet urged customers to remain alert to WhatsApp scams, warning that fraudsters could trick users into giving away access to their accounts through social engineering. Social engineering involves manipulating people into revealing confidential information, such as verification codes, or taking actions that allow criminals to access their accounts.
The company advised users never to share their WhatsApp verification codes, even with people they know, and to be cautious of messages that create a sense of urgency.
It also urged customers to verify requests for money by contacting the person directly before making any payments.
“Pause. Check. Protect,” the company advised users in its warning message.
Econet’s safety guidelines also recommend enabling WhatsApp two-step verification by setting a six-digit PIN and adding a recovery email address.
Users are further encouraged to regularly check their linked devices and remove any unfamiliar devices connected to their accounts.
The company also advised customers to keep WhatsApp updated, avoid clicking on suspicious links and exercise caution when scanning QR codes or linking their accounts to other devices.
Customers should also check their call-forwarding settings and disable any unauthorised forwarding. WhatsApp account hijacking can expose users to financial fraud, as criminals may impersonate account owners to solicit money from their contacts or access private conversations.
Users who suspect that their accounts have been compromised should take immediate steps to recover access and warn their contacts against responding to suspicious messages or requests for money.
Users should avoid assuming that clicking on a suspicious link is the only way an account can be compromised.
