Naples – "Hi! If it's not a problem, could you vote for my niece? It's really not long now..." The text sounds familiar, from a friend or relative. In reality, it could be the trigger for an increasingly widespread cyber scam, designed to exploit trust, digital habits, and the ease with which links are shared in WhatsApp chats and groups.
In recent months, even in the Naples area, the Carabinieri Provincial Command has received a growing number of complaints: they are targeting a technique known as Ghost Pairing, which allows cybercriminals to take control of a victim's account through a secretly activated WhatsApp Web session.
The consequences can be serious: access to messages, theft of personal information, and even requests for money sent to contacts "in the name" of the scammed person.
The message that comes from a real contact
The pattern repeats itself. The victim receives a message from a genuine contact (who, however, may have already been compromised): an invitation to vote for a girl or young dancer in a supposed dance competition or cultural event.
There's a link in the text. The landing page appears credible: well-designed graphics, reassuring images, and references to seemingly institutional organizations or initiatives. The goal is to lower the user's defenses and encourage them to quickly complete the transaction.
The decisive step: "authenticate with WhatsApp"
After clicking "Vote," a pop-up appears: to "avoid invalid votes," you're asked to authenticate via WhatsApp. Then, the user enters their phone number and, most importantly, enters a verification code shown on the screen (or otherwise requested during the process).
This is where the scam comes into play: that code isn't used to vote, but to connect the victim's account to a device controlled by cybercriminals via WhatsApp Web. Within moments, the account is compromised.
From stolen accounts to requests for money: the chain of infection
Once inside, scammers can read conversations and impersonate the victim. The next step is often to send messages to contacts asking for money: sudden emergencies, accidents, personal problems, payments "to be made immediately." At the same time, the same scam link is forwarded to other numbers, fueling a chain that quickly spreads across chats and groups.
The Carabinieri's activities: monitoring and investigations
The Carabinieri Cyber Investigation Unit of the Naples Provincial Command monitors the web and messaging platforms daily to detect recurring patterns, gather reports, and track down those responsible. This effort, investigators explain, combines prevention and technical analysis with targeted investigations to protect victims, in a context where scams are becoming increasingly sophisticated.
How to defend yourself: practical rules
To reduce the risk, the indications are simple but decisive:
Don't click on suspicious links received via message, even if they come from known contacts.
Be wary of requests for votes, prizes, or contests that require entry via WhatsApp.
Never enter verification codes on external sites or share them with third parties.
Check “Connected Devices” in WhatsApp settings and delete unrecognized logins.
Enable two-step verification to increase account security
If in doubt, immediately notify your contacts and contact the police.
Digital security, even before technical tools, requires awareness: recognizing the signs of a scam is the first step towards protecting yourself and your network.
Source EDITORIAL TEAM
Comments (1)
This article is very informative, but I don't know if people truly understand the gravity of the situation. People often click without thinking and end up in unpleasant situations. Security should be everyone's priority, but it seems that isn't the case.