WhatsApp scam checker
WhatsApp is a common target for scammers because messages feel personal and trusted. Check a message below before you reply, click, or send anything.
Check a suspicious message privately
Runs in your browser. No login. No message storage.
Protect your privacy before you check
- Do not paste passwords, OTPs, private keys, or full card details.
- Remove bank details, passport numbers, Emirates ID, Aadhaar, or national IDs.
- The checker is designed to run in your browser and not store your message.
Message checked
Your safety report is below. You can edit it and run the check again.
Your result will appear here
Paste a message and choose Check this message to see your safety guidance.
- A calm risk level
- Red flags found
- Safe next steps
- Official reporting links
- A family-safe summary
Your pasted message is not shown in shared or printed summaries.
Common WhatsApp scams
- Verification code (OTP) theft to take over your account
- Family emergency or "hi mum/dad" impersonation asking for money
- Investment or crypto groups promising guaranteed returns
- Job offers that ask for an upfront fee or personal details
Red flags on WhatsApp
- Someone asks for the 6-digit code WhatsApp just sent you
- A contact suddenly asks for money using a new number
- Pressure to move the chat to another app or platform
- Links that claim to be WhatsApp support or account verification
Safety tips
- Never share your WhatsApp verification code with anyone.
- Turn on two-step verification in WhatsApp settings.
- Call the person on a known number to confirm any money request.
- Report and block suspicious senders inside WhatsApp.
Related scam types
Related scam-type hubs
Related red flags
Glossary terms
Frequently asked questions
How do I check a WhatsApp message for scams?
Paste the WhatsApp message into the checker on this page. It runs in your browser and shows the red flags, what the message is likely trying to do, and safe next steps.
Is it safe to paste a WhatsApp message here?
Yes. The message is analysed on your device and is not stored or sent to a server by default. Sensitive details are masked before analysis.