How to spot WhatsApp and SMS scams

Most scam messages follow a handful of patterns: they create panic or excitement, then push you to tap a link, share a code or send money. Learn the patterns below and you’ll spot nearly all of them. Got a link you’re unsure about right now? Paste it into the website legit checker or the redirect checker to see where it really goes, without opening it on your phone.

The golden rules

Never share an OTP, PIN or WhatsApp verification code, with anyone, for any reason. Your bank, SARS, a courier or WhatsApp will never ask for it.
Don’t log in through a link in a message. Open your banking app or type the real web address yourself.
Urgency is the trick. “Your account will be blocked today”, “final notice”, “parcel returned in 24 hours” are designed to stop you thinking.
Check a new number by calling the person on the number you already have.

1. “Your parcel is waiting: pay the delivery fee”

An SMS or WhatsApp claims to be from the Post Office, PostNet, a courier or customs, saying a parcel can’t be delivered until you pay a small fee (often a few rand). The link goes to a fake payment page that steals your card details, and the “small fee” is followed by much bigger debits. Real couriers tell you about fees in their own app or website, which you can open yourself with the tracking number from the shop you bought from.

2. Fake bank alerts and “verify your account”

“Suspicious transaction on your account, click to cancel” or “your banking app is suspended, verify now”. The link opens a copy of your bank’s login page; whatever you type goes to the scammer, who then calls you “from the fraud department” to get the OTP. Your bank won’t send a link asking you to log in. If you’re worried, open the banking app yourself or call the number on the back of your card.

3. “Hi Mum, this is my new number”

A message from an unknown number pretends to be your child, a relative or a friend whose phone “broke”. After a bit of chatting comes an urgent request to pay a bill or send money. Always phone the person on their old number, or ask a question only they would know.

4. WhatsApp account takeover (the 6-digit code)

You get a WhatsApp code by SMS you didn’t ask for, then a message from a “friend” (whose account was already stolen) saying they sent it to you by mistake and asking you to forward it. That code lets the scammer move your WhatsApp to their phone and message all your contacts. Never share it. Turn on two-step verification (WhatsApp → Settings → Account → Two-step verification) so a stolen code alone isn’t enough.

5. Job offers and “like videos, earn money” tasks

A recruiter offers easy money for liking YouTube videos, rating products or reviewing hotels. The first few small payments are real, to build trust; then you’re asked to “top up” or pay to unlock bigger tasks, and the money disappears. Real employers don’t pay you to like things, and never ask you to pay to work.

6. SARS refunds and government grants

“You have a tax refund waiting” or “your SASSA grant needs to be updated” with a link to claim it. SARS works through eFiling and the SARS MobiApp; SASSA through its official channels. The real websites end in .gov.za (sars.gov.za, sassa.gov.za). Anything else is fake, however official it looks.

7. Prizes, vouchers and giveaways

“Shoprite is giving away R2,000 vouchers, share with 5 groups to claim” or “you’ve won a phone, pay delivery”. These collect personal details, push you to share the scam further, or charge a “release fee”. If you didn’t enter, you didn’t win.

8. Investment and crypto “opportunities”

Someone (often met on WhatsApp groups, Facebook or dating apps) shows screenshots of big returns and invites you to a trading platform. The platform is fake: your balance grows on screen, but you can’t withdraw without paying “fees” or “tax”. Check whether an investment provider is registered with the FSCA before sending anything, and treat guaranteed high returns as a red flag.

9. Online shopping through WhatsApp or social media ads

A shop that only exists on Instagram, Facebook Marketplace or WhatsApp, with unbelievable prices and EFT-only payment. Before paying, run the shop’s website through the website legit checker (brand-new domains are a big warning sign) and pay with a method you can dispute.

How to check a link without opening it

Press and hold the link in WhatsApp or Messages and choose Copy (don’t tap it).
Paste it into the website legit checker. It follows the link, shows the real website, its age, and whether it copies a bank, shop or courier name.
For short links (bit.ly, tinyurl), the redirect checker shows every step the link takes.
Look carefully at the final address. fnb.co.za is real; fnb-secure-verify.com isn’t. Spelling tricks like capitecbank-za.co or swapped letters are common.

What to do if you clicked or paid

The full checklist (bank, ID protection, where to report in South Africa) is in what to do if you’ve been scammed. The essentials:

Typed bank details or an OTP? Call your bank’s fraud line immediately (the number on the back of your card or in the app) so they can block the card or account. Speed matters.
Typed a password? Change it on the real website, and anywhere else you used the same password. A password generator and a password manager make unique passwords easy.
Lost your WhatsApp? Re-register WhatsApp with your number (you’ll get a new code by SMS), turn on two-step verification, and warn your contacts not to send money.
Gave your ID number? Consider registering for protective listing with the Southern African Fraud Prevention Service (SAFPS), which helps stop criminals opening accounts in your name.
Lost money? Open a case at your local SAPS station and give the case number to your bank.
Report the message: block and report the number in WhatsApp, and report fake websites to Google Safe Browsing so browsers start warning other people.

Frequently asked questions

How can I tell if a WhatsApp message is a scam?

Watch for an unknown number, urgency, a link, a request for money, or a request for a code or OTP. One of these alone can be innocent; two or more together is almost always a scam. Phone the person or company on a number you already have to check.

Can I get hacked just by opening a WhatsApp message?

Reading a normal text message is very unlikely to harm you. The danger comes from tapping links, downloading files (especially .apk apps on Android), sharing codes or sending money.

Is it safe to reply “STOP” to a scam SMS?

For scam messages it’s better not to reply at all: a reply confirms your number is active. Block and report the number instead. Only use STOP for marketing messages from companies you actually know.

How do I check if a link is safe?

Copy the link without tapping it and paste it into a link checker such as FernTool’s website legit checker. It shows where the link really goes, how old the website is and whether it copies a well-known brand.

Will my bank refund me if I was scammed?

It depends on the bank and on how the money left your account. Payments you authorised yourself (for example an EFT or sharing an OTP) are often harder to recover, which is why calling the bank immediately matters.