The WhatsApp scam that starts with one saved contact

Spoofed calls and voicemails telling people to add a number on WhatsApp drove more than 3,600 complaints to the UK Information Commissioner's Office in September, a five-year high that has now triggered an ICO investigation. The pitch often arrives from a number that looks like a normal UK mobile line and uses part-time work or recruitment language to get the recipient to save the contact. That step matters because once the number is in a user's contacts, the scammer can have a better chance of staying in touch through WhatsApp instead of being filtered out early.

3,600 WhatsApp-linked complaints hit the ICO in September

The September total was nearly triple the volume recorded in July, giving the ICO a sharp enough spike to treat the pattern as more than routine nuisance traffic. The regulator has opened an investigation and says the complaints indicate a broader campaign rather than a handful of unrelated robocalls. The total reflects complaints about automated calls or voicemails that direct people toward WhatsApp, though it is still unclear how many complaints represent unique victims.

For business users and operators, the practical takeaway is straightforward: this is not just another spam-call wave. The scam is designed to move the conversation onto a channel many teams already use for customer contact, sales, support, and hiring. That makes the initial phone call only the handoff point; the real risk starts when someone saves the number and opens a WhatsApp thread.

How the 'add me on WhatsApp' pitch keeps the scam going

The call usually asks the recipient to add a number on WhatsApp, often after presenting the contact as a recruiter or a source of part-time work. The numbers are spoofed to look like UK mobile numbers, which can make the outreach seem ordinary at first glance and lower suspicion long enough to get the number saved. In practice, the trick is less about getting someone to answer the phone than getting them to create a trusted contact entry.

That contact step can weaken some of WhatsApp's blocking and filtering protections. Once the scammer is saved in a contact list, they may be able to keep messaging on the encrypted platform with less friction than an unknown sender would face. For teams that run WhatsApp-heavy workflows, that makes contact hygiene a real operational issue: staff should not save unfamiliar numbers from unsolicited calls by default, especially when the approach starts with a voicemail and a job-style pitch.

The recruitment lure behind the call

The messages often lean on recruitment language, including offers of part-time work, because that gives the caller a simple reason to continue the conversation on WhatsApp. Security specialists say the end goal is not settled, but the likely paths include recruitment fraud, money muling, or harvesting active numbers for later phishing and abuse. What is clear is that the campaign is built to identify responsive users and pull them into a more persistent chat channel.

WhatsApp says it already has anti-scam measures in place, including a setting that can silence calls from unknown numbers. The company also says it bans millions of accounts each year for bulk registration or automated messaging. Those tools matter as background, but they are not a cure-all for a scam that starts outside WhatsApp and then uses a saved contact to look more legitimate once the conversation moves inside the app.

The ICO investigation is still at an early stage, and the broader enforcement outcome is not yet known. In the meantime, the clearest near-term defense is procedural: if an unexpected call or voicemail asks you to add a number on WhatsApp for work, treat the saved-contact request itself as the warning sign.

Disclaimer: This article was created with the assistance of AI. Images are for illustrative purposes only.