Question 1

Why do attackers use WhatsApp instead of email for impersonation scams?

Accepted Answer

Email has layers of protection. Spam filters, domain verification (SPF, DKIM, DMARC), and security awareness training all focus heavily on email threats. WhatsApp and other messaging apps sit outside that perimeter. There&#x27;s no corporate filtering, no sender domain to verify, and no IT security team monitoring messages on personal devices.Messaging apps also create psychological conditions that favor attackers. People respond to texts within 90 seconds on average, compared to 90 minutes for email. The informal, conversational tone of messaging makes it feel rude to question whether your boss is really your boss. Attackers exploit this social dynamic, combining authority pressure with the rapid-fire pace of chat to push victims into acting before they think. The result is that messaging-based scams have a higher success rate per attempt than email phishing.

Question 2

What should I do if I receive an unusual request from a senior leader on a messaging app?

Accepted Answer

Stop and verify through a separate channel before doing anything. Do not reply to the message asking if it&#x27;s really them, because the attacker will simply say yes. Instead, contact the person through a channel you already trust: their known work email, a direct call to their office number, a Slack message, or even walking to their desk. If they didn&#x27;t send the request, you&#x27;ve just stopped an attack.Never purchase gift cards, transfer money, or share sensitive information based on a text message, regardless of who appears to be asking. No legitimate executive request requires you to buy gift cards at a store. This is a universal red flag. If your organization doesn&#x27;t have a clear policy on verifying unusual financial requests, raise it with your manager or security team. According to the FTC, gift card scams alone cost consumers and businesses over $228 million in 2022. Having a simple "verify before you act" habit can prevent your organization from contributing to that number.

WhatsApp Соціальна інженерія

Що ви дізнаєтесь у WhatsApp Соціальна інженерія

WhatsApp Соціальна інженерія — Кроки навчання

Тихий день

Повідомлення від VP

Терміновий запит

Побудова довіри

Аліса відповідає

Ескалація

Щось відчувається

Виявлено червоні прапори

Час перевірки

Підтверджено: це шахрайство