Scam targets Whatsapp users in Africa

AS Africa is becoming more mobile focused, connecting via social media platforms such as WhatsApp, BBM, Facebook and Twitter is becoming more of a necessity. We, as Africans, use these platforms daily to not only converse with our peers, but to also conduct business, advertise brands as well as publish and share breaking news articles.

As social media evolves, and has predominantly become more popular across Africa, it has now become a target for cyber criminals as well as fraudsters.  According to the techieguy.com, a new WhatsApp scam in now on the warpath in South Africa, and is also expected to reach the rest of the African continent soon.

Liron Segev, a South based IT consultant, revealed that the latest WhatsApp scam essentially alerts users (Via SMS) that their WhatsApp application needs to be updated. When following the link, provided within the SMS notification, users are then taken to a website where they will be under the assumption that they are indeed signing up to upgrade the WhatsApp application.

However, instead of updating the application, the user has now signed up to a subscription service that costs R7 per day. This results in the user being billed roughly R210 per month extra on their phone bill, where the initial intention was to upgrade the WhatsApp application. Granted, scams like this can be spotted fairly quickly, especially by those who are tech savvy; however, it becomes a quick financial trap for those who are not.

Segev says: “WhatsApp should only be updated from the official App store. Developers of apps dislike managing different versions of their app and the official application store makes it simple to have one point which notifies all their users of the new version. Developers may offer access to early “beta” versions of their software direct from their site, but that is applicable to a niche audience and legitimate app developers would never invoke a system such as an SMS to ask their users to update their apps.”

This is also the case for any other application that is pre-installed or purchased from an app store. Social media apps such as Facebook, Twitter, and any other app featured on the app store should be updated via the app store — which has been preloaded onto devices running Android, Windows Phone OS, or iOS. This also relates to any other application such as mobile games, productivity apps, or even location-based applications.

Once locked in, these scams can be hard to get out of. This is due to the fact that the user has physically typed in their details as well as confirmed their acknowledgement by clicking a confirmation or continue button. To add to this, scam artists as well as legitimate companies include terms and conditions, which are often over looked by the user trying to update an application. These terms and conditions may be included at the bottom of a page, out of sight of the user, or be placed in a text box in a much smaller than normal font. The terms and conditions then lock the user into an agreement, which was masked by the promise of an upgraded application.

To add to the WhatsApp scam, there are thousands upon thousands of email scams making the rounds. These include receiving invoices for apparent purchases made on popular eCommerce websites. Cyber criminials also send emails stating that payment has been made via your personal PayPal account. In order to identify these scams users should hover their mouse over the links provided. This will essentially identify where the link is really directing you in the lower left corner of the email.

To avoid online scams it is always essential to read through the fine print. Additionally, always avoid replying to emails as well as text messages from unknown sources. Scam artist and cybercriminals tend to scour the internet for email addresses. Once obtained, they send attachments that include malware, spyware and ransomware to the user. The user then believes that the content is legitimate and either opens an attachment, or replies to an email.

By replying to the email, you provide cybercriminials with your details. By clicking on attachments you can unknowingly install malicious content of your device, which records login details, keystrokes and information regarding your bank accounts. —www.itnewsafrica.com

newsdesk@fingaz.co.zw