ISLAMABAD: Cybercrime is increasing rapidly around the world, with fraudsters adopting increasingly sophisticated methods to steal money and sensitive information from unsuspecting victims. In Pakistan, criminals are now reportedly exploiting WhatsApp accounts through a courier delivery scam targeting citizens.
In the latest scheme, scammers contact people through WhatsApp calls while pretending to represent well-known courier companies. They tell the recipient that a parcel has arrived and claim that a verification code is needed to confirm the delivery or verify the recipient’s address.
The fraudsters then ask the victim to provide the one-time password (OTP) or WhatsApp verification code received on their phone.
How the WhatsApp Courier Scam Works
The scam relies on convincing victims that the verification code is necessary to receive a parcel.
Once a victim shares the code, the criminal can potentially use the phone number to register the victim’s WhatsApp account on another device. This can allow the scammer to take control of the account.
After gaining access, the fraudster can impersonate the account owner and send messages to their family members, friends, colleagues and other contacts.
The scammers commonly create a sense of urgency by claiming that the account holder is facing an emergency and urgently needs money.
They may then ask contacts to transfer money immediately, exploiting the trust associated with messages coming from a familiar WhatsApp account.
PTA Issues Important Warning
The Pakistan Telecommunication Authority (PTA) has advised citizens to remain extremely cautious and never share WhatsApp verification codes or OTPs with anyone.
A verification code should be treated as confidential information. Legitimate organisations should not require customers to disclose their personal WhatsApp verification codes over a phone call.
Citizens who receive calls about parcel deliveries have also been advised to independently verify the caller before providing any information.
Instead of relying on the number provided by a caller, people should contact the relevant courier company through its official channels to confirm whether a parcel actually exists.
Cybercriminals may not limit their tactics to courier companies.
Authorities have warned that fraudsters can pretend to be representatives of banks, mobile phone companies, courier services or government institutions in an attempt to gain victims’ trust.
They may ask for sensitive information such as verification codes, passwords, account details or other personal information.
The use of familiar company names and urgent situations can make these scams appear convincing, particularly when victims are caught off guard.
People should avoid sharing any WhatsApp OTP, verification code, password or other sensitive information with callers.
If someone claims to be calling about a parcel, the safest approach is to independently contact the courier company using its official website, app, helpline or other verified communication channel.
Users should also be cautious if a friend or family member suddenly asks for money through WhatsApp. If the request appears unusual or urgent, they should verify the person’s identity through a separate phone call or another trusted method.
The latest scam highlights how a seemingly harmless verification request can potentially lead to a full WhatsApp account takeover.
Once criminals gain access to an account, they can exploit the victim’s existing relationships to make fraudulent requests appear genuine.
Citizens are therefore urged to keep verification codes private and remain suspicious of unexpected calls asking for personal or financial information.
As cybercriminals continue to develop new methods of fraud, awareness and independent verification remain among the most effective ways for users to protect their accounts and money.
