Rajasthan Police: New WhatsApp Scam; Fake QR Codes Being Used to Hack Accounts

UdaipurTimes, Oct 22, 2026 - Cyber criminals are now taking control of WhatsApp accounts and targeting people through them. Following the directions of Director General of Police Rajeev Kumar Sharma, the Rajasthan Police’s R4C Cyber Crime Branch has issued an advisory to help people protect themselves against such fraud.

Additional Director General of Police (Cyber Crime) VK Singh said fraudsters break into accounts using methods such as fake QR codes, social engineering and obtaining one-time passwords (OTPs).

Once they gain control of an account, they send messages to people in the victim’s contact list, asking for money in the name of emergencies or medical treatment. They may also send suspicious links.

How Fraudsters Trap Victims

• Linking WhatsApp to an unknown device through fake QR codes or links.
• Impersonating a friend, government official, or customer support representative to obtain an OTP, verification code, or two-step verification PIN.
• Misusing SMS, notification or accessibility permissions through suspicious apps.
• Convincing victims to install remote-access or screen-sharing apps to gain control of their phones.

Warning Signs to Watch Out For

• An unknown device appears under Linked Devices.
• Messages are sent or chats are read without your knowledge.
• You receive an OTP or verification code that you did not request.
• Your contacts inform you that someone is asking for money from your account.
• You are suddenly logged out of WhatsApp.

Precautionary Measures

• Do not scan QR codes received from unknown people, websites or messages.
• Keep two-step verification enabled, create a strong PIN and add a recovery email address.
• Never share your OTP, registration code, or two-step verification PIN with anyone. WhatsApp and government officials will never ask you for these details.
• Regularly check Linked Devices and log out any unfamiliar devices.
• Keep your mobile operating system and Apps updated. Do not install unknown APK files or suspicious applications.
• Never install a remote-access app or share your screen at someone else’s request.
• If you receive an unusual request for money, verify the person’s identity by calling them through another channel.

What to Do If You Suspect Your Account Has Been Hacked

1. Go to Settings → Linked Devices and log out all unfamiliar devices.
2. Re-register WhatsApp using your phone number. Do not share the verification code you receive with anyone.
3. Check the security of your two-step verification and email account. Change your PIN or password if necessary.
4. Remove suspicious Apps, review App permissions and run a security scan.
5. Inform your contacts through another communication channel that they may receive suspicious messages from your account.
6. Preserve suspicious messages, phone numbers, URLs, screenshots and transaction details as evidence.

Where to File a Complaint
If such an incident occurs or an attempt is made to defraud you, immediately report it to the nearest police station or cyber police station. You can also file a complaint through the following channels:

• National Cyber Crime Reporting Portal: https://cybercrime.gov.in 
• Cybercrime Helpline: 1930
• Cyber Helpdesk Nos: 9256001930 and 9257510100