© IE Online Media Services Pvt Ltd
Tags:
Journalism of Courage
Hackers can easily break into your WhatsApp account, and one of the most common tricks today involves delivery scams. Actor-director Upendra, known as Real Star, and his wife Priyanka recently fell prey to one such fraud.
Priyanka received a call from someone posing as a delivery agent from Dubai, who claimed her package could not be delivered. She was asked to dial a code. Though hesitant, she complied — her phone froze soon after. She forwarded the link to her husband, and once Upendra clicked it, his phone, too, stopped working.
Within minutes, messages from Priyanka’s WhatsApp began reaching friends and family, pleading for urgent money. Some even responded, believing the couple was in trouble. Calls to their numbers were diverted, keeping them unaware. Realising they had been hacked, the couple contacted the cyber helpline 1930 and police, later issuing a warning on social media. Priyanka also revealed that fraudsters used AI to mimic her voice.
Cyber experts say these scams rely less on technical loopholes and more on human manipulation. “With continuous technological advancement, cybercriminals are no longer relying solely on technical loopholes; now they are constantly tapping human behaviour and scamming people,” said Srinivas L, executive director, 63 SATS Cybertech.
Niharika Tyagi, cybersecurity researcher at Webhack Solutions Pvt Ltd, explained: “Earlier, we only got calls from delivery boys to receive orders. Now, fraudsters exploit that habit. They use breached customer data, pose as delivery executives or support staff, and then trick victims into merging calls. At the same time, they trigger a WhatsApp linking code request. Once the victim unknowingly merges the call, scammers capture the code and gain full access to WhatsApp and its data.”
Amit Relan, CEO and co-founder of mFilterIt, said, “What we are witnessing is not low-level cybercrime, but the professionalisation of fraud. Fake delivery calls, malicious links, and AI-driven voice cloning are no longer isolated tactics — they are part of a well-orchestrated playbook designed to exploit trust at scale. Once a WhatsApp account is compromised, it doesn’t just endanger one individual, it weaponises their entire network. Cybersecurity today is a collective responsibility — and ignoring that reality will only widen the advantage fraudsters already hold.”
Tyagi explained how these scams work.
These are just tricks: Scammers fool potential victims into merging calls or sharing OTPs instead of directly hacking.
Account takeover: With the code, they register your WhatsApp on their own device.
Impersonation: Once inside the account, scammers send fake urgent messages to the victim’s contacts.
Timing the attack: They often act when the victim is asleep or busy, so one can’t stop them quickly and the damage is already done.
Tyagi also shared tips on how to stay safe from such frauds.
Don’t trust or answer unknown calls; verify with caller ID apps.
– Never merge calls when asked by strangers.
– Regularly check and log out of unknown devices linked to your WhatsApp.
– Never share OTPs with anyone.
– Enable two-step verification on WhatsApp.
– Treat unusual calls or messages with doubt, and always confirm the source.
Some cybersecurity firms have launched tools to help. “To address rising cyber threats, 63SATS Cybertech has launched CYBX, a mobile app focused on security. It offers private, encrypted calls, real-time phishing checks, QR code verification, and even cybersecurity insurance for financial cover in case of fraud,” Srinivas said.
A Meta spokesperson told indianexpress.com: “We strongly advise people never to click on links from unknown numbers or share personal details, including their six-digit PIN code, with anyone, not even friends or family.”
On WhatsApp, the spokesperson recommended turning the two-step verification on for added security, silencing unknown callers to filter out spam, blocking and reporting suspicious accounts, and frequent privacy checkups to update who can contact you and who can see your personal details.
The company also runs public awareness campaigns like Scams se Bacho and is part of the Safer Internet India coalition to tackle cybercrime, the Meta Spokesperson said.
If money is lost, report at https://cybercrime.gov.in or dial 1930 and keep details of the transaction ready to be reported. Also, visit the nearest police station to file a cyber complaint.
