Top of main content

How to avoid WhatsApp and Instagram account takeover

Fraudsters are infiltrating popular messaging platforms such as WhatsApp and Instagram (IG). Find out how to protect yourself.

WhatsApp hackers can access your account without you knowing and use it to send payment requests to people on your contact list. Those who receive the message might believe it came from you and be likely to follow the instructions.

This tactic has spread to IG and other social networking platforms with in-app chats. So, stay cautious on all forms of messaging and social networking platforms to avoid scams.

How fraudsters can hijack your account

  1. Fraudsters could send messages claiming that your account has violated the user agreement, or that your account is at risk. They'd then lure you with a fake customer service phishing link or a contact number that connects you to fraudsters. This is to get your verification code that they have requested. Or, they might simply ask for it by sending you another message.
  2. They will then try to log in to your account with your phone number and a verification code on their own devices.
  3. Finally, you'll be asked to confirm their login attempt as genuine to gain full access to your account.

After that, the fraudsters send messages to your contacts asking for money for various reasons. As the messages are from a trusted account (yours!), recipients often comply and send the fraudsters money.

How to avoid your accounts being hijacked

1. Strengthen your security settings

Enable the two-factor authentication (2FA) feature on WhatsApp, IG and other messaging apps. This enhances the security of your accounts as two steps are required to log in.

Never share your PIN or one-time password with others.

2. Protect your sensitive personal information

Never share your sensitive personal information, including digital banking credentials, PINs or one-time passwords with others. Your money may be at risk if fraudsters get hold of the information.

Stay vigilant when you're asked for sensitive information, even if you're chatting with someone you know. There's always a chance their account or device has been hijacked.

3. Beware of suspicious links and attachments

Don't click on any links or download attachments that look suspicious – even if the message appears to be from someone you know. Always check if the source is trustworthy before taking any action.

You will never receive a hyperlink from your bank that asks you to input any sensitive personal information.

4. Learn about your apps and keep them updated

Make sure you know about the apps you use. For example, WhatsApp states that it'll never ask you to:

  • Download any other apps or systems
  • Tap a link, either to go to another website, or to activate a new service
  • Pay for their service
  • Forward a message

Meanwhile, IG's security checkup feature helps you find out whether your account is secure.

Always check for app updates on your mobile device. Keeping your apps updated can fix bugs and improve security.

5. Verify through phone call

If you receive a message from family or friends asking for any form of financial assistance, always call them to confirm before doing anything. If the bank account holder name doesn't look right, be extra careful before sending any money.

Use the Hong Kong Police Force's Scameter or Scameter+ app to verify suspicious numbers, emails, bank accounts and so on.

Be aware – whatever, whenever and wherever

Staying vigilant at all times can protect you and help fight fraud. If in doubt, call the police's Anti-Deception Coordination Centre (ADCC) hotline at 18222.

HSBC is committed to protecting your financial security. Think you might have come across a WhatsApp scam or Instagram scam? Please contact us at:

HSBC Global Private Banking customers: (852) 2233 3033

HSBC Premier Elite customers: (852) 2233 3033

HSBC Premier customers: (852) 2233 3322

Other personal banking customers: (852) 2233 3000

Related articles

Did you know that some scammers temporarily inflate your ledger balance to cheat you out of goods or money?
Choosing a strong password will go a long way toward protecting your finances.
Criminals are getting more sophisticated with telephone scams and online scams. Here are our top tips for a great defense.