A message that looks like it came from a spouse, asking for money to be sent right away, is rarely cause for alarm at first glance. Yet that ordinary-seeming text is exactly what nearly cost one Moroccan internet user a costly mistake, and his story, now circulating widely online, has put a spotlight on a fraud technique quietly spreading across WhatsApp in Morocco.
The account goes like this: a man received a message purportedly from his wife, urging him to transfer funds urgently. Something about the phrasing felt off, not quite how she normally writes, so he called her directly before acting. She denied ever sending the message. More unsettling still, when she checked her own WhatsApp account, there was no trace of it there either.
Cybersecurity specialist Amine Raghib was asked to make sense of the incident, and his explanation cuts against a common assumption: this kind of scam does not necessarily mean WhatsApp itself has been breached. More often, he explained, the weak link sits one step earlier, in the victim’s Google account. Once fraudsters gain access there, they can quietly swap the phone number tied to a saved contact while leaving the name untouched, then set up a lookalike WhatsApp profile using the same photo and details to make the impersonation convincing.
With this method spreading, Raghib is urging smartphone users to lock down their accounts, starting with Google: regular password changes, two-factor authentication, and periodic reviews of which devices remain logged in. But his central piece of advice is simpler than any technical fix. Before sending money to anyone, even someone who appears to be a close relative, always confirm their identity with a direct phone call rather than trusting a text message alone.
The episode is a reminder that as scammers grow more adept at exploiting family trust, old-fashioned verification, picking up the phone, remains one of the most effective defenses against fraud that technology alone cannot fully prevent.
