A message that seems innocent—“Can you vote for my child?”—could be the start of an attempt to hack WhatsApp. The Cybercrime Division issued a warning on October 21, 2026, about a scam disguised as an online poll. What makes this particularly insidious is that the message may appear to come from someone we know.
How the scam works
The scammers claim that a child is participating in a contest and ask for a “quick vote.” The message contains a link that leads to a fraudulent webpage. The page may ask for a verification code or prompt the user to authorize another device to connect to their WhatsApp account.
If someone enters the code or authorizes the connection, the scammer can gain access to the account. They then use the victim’s name to send the same trap to family, friends, and acquaintances. That’s why the scam often looks like a message from someone you trust.
Five steps to protect yourself
- Don’t enter a WhatsApp verification code on a website you opened from a suspicious message.
- Don’t approve the connection of an unknown device, even if the request appears to come from a friend.
- If someone asks you for a “vote” or another unusual favor, call your contact using the number you already have saved.
- In WhatsApp, open “Linked Devices” and disconnect any you don’t recognize.
- Enable two-step verification and protect your personal PIN.
What if I’ve already clicked on the message?
Just because you opened a link doesn’t automatically mean you’ve lost access to your account. The key factor is whether you provided any information, your password, or access to a linked device. Close the page, check your linked devices and security settings. If you detect unauthorized access, follow WhatsApp’s official account recovery instructions and notify your contacts by phone or other means.
If the perpetrator used the account to request money, clearly tell your contacts not to transfer any funds. If bank details or money have already been provided, contact the bank and the authorities immediately.
Important Information for Parents and Grandparents
You don’t need to be tech-savvy to protect yourself. Remember one simple rule: no poll requires your personal password or WhatsApp login authorization. The most effective way to verify is to call the person who supposedly sent the request.
Source: Cybercrime Prosecution Directorate, update 10/21/2026. To report an incident: 11188.