Editorial image representing WhatsApp security, payments, and product updates through service and device cues.

WhatsApp adds on-device scam detection and a new account password

WhatsApp is rolling out a package of operator-facing changes centered on on-device scam detection, a new account password to replace the familiar 6-digit two-step verification PIN, and added channel admin tools including scheduled posts and admin profiles. The practical shift is straightforward: stronger account protection and better publishing control for teams that rely on WhatsApp for support, sales, or broadcast updates. What remains unclear is scope. WhatsApp has not confirmed which users, regions, or release tracks will get each of these changes first, and the features do not appear to share one single rollout path.

On-device scam detection and the new account password

The clearest security change is the scam-detection tool running directly on the device with a machine learning model. That matters at the product level because messages stay on the phone instead of being sent elsewhere for analysis, which lets WhatsApp add scam screening without breaking end-to-end encryption. For users handling high message volumes, that points to faster message triage inside the app itself rather than a separate review layer.

WhatsApp is also changing the two-step verification flow by replacing the current 6-digit PIN with an account password made of letters and numbers. The company has not clarified whether that shift happens immediately for everyone or whether the old PIN and the new password will coexist during a transition. Even with that open question, the direction is clear: WhatsApp is moving toward stronger account-access controls, especially for people who depend on one account to manage customer conversations or outbound messaging.

That change also fits with WhatsApp's broader account-security push around passkeys. More than one billion users have already added a passkey to their WhatsApp account, giving useful context for why the app is strengthening sign-in and recovery protection in other parts of the flow as well. For operators, the takeaway is less about a single new login screen and more about reducing the odds that a business-critical account is lost to weak credentials or guessable recovery settings.

Channel admins get scheduling and profile controls

On the publishing side, WhatsApp is giving channel admins a more structured control layer. Admins can create admin profiles, and they can schedule channel updates for a chosen date and time instead of posting manually at the moment a message needs to go out. That is a practical upgrade for organizations using channels for announcements, promotions, or time-sensitive service updates.

The scheduling piece is especially useful for teams that currently depend on one person being available to publish at the right time. A chosen date-and-time flow means fewer manual handoffs and less risk of missed updates during off-hours, shift changes, or campaign launches. WhatsApp has not said whether scheduling is available across all channels or only a subset yet, but the feature is clearly aimed at tighter publishing coordination rather than a broad reinvention of the channel product.

Android and iPhone polish, plus the open payments question

Beyond security and admin controls, WhatsApp is also refining the day-to-day app experience on both Android and iPhone. On Android, animated emoji reactions are coming, and media thumbnails are appearing in the chat list, which can make message streams easier to scan before opening a conversation. On iPhone, WhatsApp is adding Liquid Glass updates for drawing and video surfaces, a more visual polish pass than a workflow change but still part of the same product package.

There is also an iOS Payments section in development, but that remains the least settled part of the update set. It may signal future expansion, yet no countries, launch timing, or rollout plan have been confirmed. For business users, the actionable news is still the security and channel-control package: safer account access, messages that stay local during scam checks, and less manual coordination when publishing through channels.

Disclaimer: This article was created with the assistance of AI. Images are for illustrative purposes only.

About the author

Samarth Agrawal
Samarth Agrawal

Samarth Agrawal is an AI and technology professional who writes about WhatsApp, automation, and emerging AI trends. He focuses on simplifying complex tech updates into practical insights for businesses, creators, and everyday users