WhatsApp ‘Ghost Pairing’ Fraud: Telangana Police Warn Citizens About New Invisible Cyber Scam

Telangana Police have issued a public warning about a new and highly deceptive cyber scam known as WhatsApp “Ghost Pairing” fraud, which allows criminals to secretly access a victim’s WhatsApp account without their knowledge. The alert comes after multiple cases were detected across India, prompting intervention from both state cybercrime units and the Ministry of Electronics and Information Technology (MeitY).

According to investigators, fraudsters are exploiting WhatsApp’s legitimate multi-device feature to pair their own devices with a victim’s account. Once paired, attackers gain real-time access to private chats, media files, and contact lists—opening the door to identity theft, financial fraud, and impersonation scams.

What Is WhatsApp “Ghost Pairing”?

“Ghost Pairing” is a stealth technique where cybercriminals trick users into approving an unauthorised WhatsApp device link. Victims are typically lured through phishing links or fake security prompts asking them to “verify” or “reconnect” their account.

Once the malicious QR code is scanned or link clicked, the attacker’s device becomes silently linked. The victim continues using WhatsApp normally, unaware that a second “ghost device” is monitoring conversations in the background.

Cyber officials noted that unlike older scams involving malware downloads or OTP sharing, this method abuses a genuine WhatsApp feature, making it harder to detect.

How the Scam Unfolds

Police explained that the fraud usually follows a predictable pattern:

• The victim receives a WhatsApp message claiming account verification or security issues

• The message contains a fake QR code or phishing link

• Scanning or clicking it pairs the attacker’s device instantly

• All chats, photos, and group conversations become visible to the fraudster

In many cases, victims realise something is wrong only after friends receive suspicious messages or fraudulent money requests from their account.

How to Protect Yourself

Cybercrime officials urge users to stay alert and follow basic digital hygiene:

• Never scan QR codes or click links sent via WhatsApp claiming account problems

• Regularly check Settings → Linked Devices and log out of unknown devices

• Enable two-step verification and biometric locks

• Report incidents immediately via 1930 or cybercrime.gov.in

Experts warn that such scams often escalate into financial losses, where tracing transactions and digital evidence becomes critical-areas where auditing services in india are increasingly relied upon during cyber-fraud investigations and financial reviews.

Authorities emphasised that “ghost pairing” relies more on human trust than technical flaws, and vigilance remains the strongest defence.