Hackers are targeting WhatsApp users with a new GhostPairing scam that allows full account access without cracking passwords or encryption safeguards. The scam bypasses traditional authentication methods, posing a significant risk to user privacy and security. Users are advised to check the Linked Devices section to detect any compromises.
A new cyber threat has emerged targeting WhatsApp users through the GhostPairing scam, as reported by TechRadar. This sophisticated attack enables hackers to gain complete control over accounts without needing to break passwords or the app's encryption protections. The method exploits vulnerabilities in the linking process, allowing unauthorized devices to pair invisibly with the victim's account.
According to the report, the scam is particularly dangerous because it does not trigger standard security alerts. WhatsApp's built-in safeguards, such as two-factor authentication, remain intact, yet hackers can still access messages, contacts, and other sensitive data. The publication emphasizes that the Linked Devices section within the app is the only reliable tool for users to identify and revoke suspicious pairings.
No specific details on the scam's origins or affected regions were provided, but the warning urges all WhatsApp users to regularly review their linked devices. This incident highlights ongoing challenges in securing messaging platforms against evolving phishing and pairing exploits. TechRadar published the alert on December 21, 2025, advising immediate vigilance to prevent account hijackings.