A WhatsApp parcel scam is targeting mobile users in Pakistan, particularly women, with fraudsters posing as courier representatives to obtain verification codes and hijack accounts.
The scammers contact victims through WhatsApp calls and claim that a parcel has arrived. They then ask for a verification code, supposedly to complete delivery or confirm the recipient’s address.
The requested code is the one-time password used to register a WhatsApp account. Once a victim shares it, the fraudster can use the victim’s phone number to activate the account on another device and gain control of it.
After taking over the account, scammers impersonate the victim and message family members, friends, colleagues and other contacts. They typically claim to face an emergency and request an immediate money transfer.
Read: Pakistan Army Ditches WhatsApp for China’s WeChat Over Hacking Fears
The Pakistan Telecommunication Authority (PTA) has advised users never to disclose WhatsApp verification codes or OTPs.
The authority also urged people receiving parcel-related calls to verify the caller independently through the courier company’s official channels.
Read: WhatsApp Hacking Cases in Pakistan Surge Amid OTP Scams
PTA warned that fraudsters may also pose as representatives of banks, mobile operators, courier companies or government institutions to obtain sensitive information.