I Got a Message from an Unknown Number on WhatsApp — Is It a Scam?

2026-06-22 · 8 min de leitura · Camila Torres

Digital Safety

You're going about your day when a notification pops up. An unknown number has just sent you a message on WhatsApp. It might be a vague "Hi, who is this?", a warning that your account has been compromised, an urgent request from someone claiming to be a friend or family member — or a link you're being pressured to click immediately.

Your pulse quickens. Should you reply? Ignore it? Is it someone you actually know, or is it a trap?

That mix of urgency and uncertainty is not a coincidence. It is precisely what scammers are engineered to make you feel.

If you just received a message from a number you don't recognize, this article is for you.

Why "Unknown Number + Urgency" Is the #1 Scam Signal

The cybersecurity industry is consistent on this point: the combination of an unrecognized number and any form of urgency is the single strongest indicator of a scam attempt.

This pattern appears in virtually every major messaging scam type reported globally:

• The "Family Emergency" scam: An unknown number claims to be a relative who changed their phone, and urgently needs money to deal with a crisis.
• The "Bank Security" scam: A message or call from an unknown number impersonates your bank, warns of a suspicious transaction, and asks for credentials or an immediate transfer.
• The "Job Offer" scam: An attractive employment opportunity from an unknown contact, requiring a registration fee or sensitive personal data upfront.
• The "Missed Delivery" scam: A message claiming a parcel is on hold, with a link to pay a customs fee or confirm your address.
• Phishing links: Random numbers sending URLs that mimic well-known brands, government agencies, or delivery services — designed to steal your credentials or install malware.

According to the Federal Trade Commission (FTC), text and app-based messaging scams were the most reported fraud contact method in 2023, with 67% of all reported scams initiated via a text message or messaging app. The median individual loss for scams initiated this way was $1,000 per victim.

What Happens to Your Number After a Data Breach

When your phone number is exposed in a data breach — whether from a social network, an e-commerce platform, a delivery app, or any other service you've signed up for — it enters circulation in databases sold on the dark web and in private criminal networks.

Once out there, your number can be:

1. Added to mass-blast lists — you start receiving random spam and scam messages at scale.
2. Cross-referenced with other leaked data — scammers combine your number with your name, email, and social media activity to craft personalized, highly convincing approaches.
3. Used in targeted attacks — in more sophisticated schemes, the criminal already knows your name, your bank, and sometimes even an approximate account balance before making contact.

The 2022 WhatsApp breach confirmed by security researcher Alon Gal and reported by outlets including Cybernews and Business Insider exposed active account numbers organized by country. It remains one of the largest single sources of contact data currently in active use by scam networks worldwide.

7 Practical Signs That an Unknown Number Is a Scam

Before replying to any message from a number you don't recognize, check for these red flags:

1. Artificial urgency

Phrases like "I need an answer right now," "you only have 10 minutes," or "this is extremely urgent" are classic social engineering tactics designed to bypass your critical thinking.

2. Requests for personal or financial information

No legitimate institution — bank, postal service, tax authority, or utility — will ask for passwords, one-time codes, card numbers, or wire transfers via WhatsApp.

3. Shortened or suspicious links

URLs that don't match the official domain of the brand being impersonated are phishing traps. Always verify where a link actually leads before clicking.

4. Poor grammar or unusual formatting

Many fraudulent messages are auto-generated or machine-translated, resulting in awkward phrasing, inconsistent tone, excessive emoji use, or formatting that looks off.

5. Foreign or unfamiliar country codes

Numbers with international prefixes you don't recognize (+1, +44, +7, +91, etc.) are frequently used by scam operations running across borders, often using disposable SIM cards.

6. Generic or missing profile photo

Accounts created specifically to run scams often have no profile picture, a generic landscape photo, or an image stolen from a public social media profile.

7. The "I changed my number" opener

A message starting with "Hey, it's me — I got a new number" without any further identification is the classic entry point for the family impersonation scam. Always verify through a separate channel before engaging.

What to Do Immediately When You Get a Message From an Unknown Number

Step 1: Don't reply before identifying

Responding confirms to the scammer that the number is active and that there's a real person on the other end. This increases the value of your contact in their targeting lists.

Step 2: Run a number check

Before taking any action, identify who is behind that number. Use ZapToMe to check whether a number has already been reported as spam, scam, or telemarketing — drawing on a real-time collaborative database of reports built by the community.

Step 3: Verify through a separate channel

If the message claims to be from someone you know, reach out to that person using the contact you already have saved — a call, a different app, or an email. Never trust only the channel through which the unknown contact reached you.

Step 4: Block and report

WhatsApp allows you to block and report a number directly within the app. Reporting contributes to the platform's own detection systems and can help flag the number for other users.

Step 5: File a report if you've been targeted

If you were scammed or received threats, report the incident to your local cybercrime authority or consumer protection agency. If financial fraud occurred, contact your bank immediately to initiate a dispute.

Why Collaborative Reporting Changes Everything

One of the biggest challenges in combating WhatsApp scams is that criminals rotate numbers constantly. A number blocked today may be discarded within hours, replaced by a fresh one tomorrow.

This is exactly why tools built on collaborative databases are so effective. When thousands of users report the same number, that data becomes shared intelligence accessible to everyone in real time.

The model works like a community-powered early warning system: every user who reports a scam number protects the next potential victim. Each data point adds to a living map of active threats.

The Numbers Behind a Global Problem

With over 2 billion active users worldwide, WhatsApp is not just the world's most-used messaging app — it is also the most targeted platform for social engineering attacks globally.

What Security Experts Recommend

The Global Cyber Alliance and leading cybersecurity researchers consistently highlight three core behaviors for anyone who receives a message from an unknown number:

• Treat urgency as a red flag, not a reason to act. Legitimate contacts don't pressure you into decisions in seconds.
• Never transfer money or share sensitive data based on a single unverified message, regardless of how convincing the story sounds.
• Use identity verification tools before engaging. A few seconds of checking can prevent months of recovery.

Conclusion: Your Instinct Is Right — Now Act on It Correctly

Receiving a message from an unknown number triggers a real and valid discomfort. That instinct exists for a reason. The key is to channel it into action rather than paralysis — or worse, a rushed response driven by artificial urgency.

The golden rule is simple: don't react before you identify. Before replying, clicking any link, or transferring any amount, run a number check, cross-reference with collaborative reports, and confirm identity through a separate channel.

WhatsApp connects over 2 billion people. As long as half a billion exposed phone numbers continue circulating in criminal networks, awareness and the right tools remain your strongest line of defense.

Don't react before you identify.