Scammers target WhatsApp and Instagram: How to protect your digital identity

WISE NEWS PRESS / ISTANBUL, TURKEY — DEC. 12, 2025

With Instagram and WhatsApp being the most widely used platforms in Turkey, they have become the primary targets for cybercriminals. Experts from ESET Turkey warn that account hijacking is rising, driven not by complex technical exploits, but by "social engineering" tactics that target human behavior.

According to 2023 data from the Turkish Statistical Institute (TÜİK), approximately 88.7% of male users use WhatsApp and 72.6% use Instagram, with similar rates for female users. This high volume of usage makes these platforms a natural hunting ground for fraudsters. Can Erginkurban, Product and Marketing Manager at ESET Turkey, emphasized that the solution requires a "zero-trust" approach combined with user awareness.

400,000 accounts compromised daily

Global digital fraud losses were estimated to exceed $1 trillion in 2023, with social media playing a significant role. Data cited in a lawsuit against Meta reveals the scale of the threat: while an average of 100,000 WhatsApp accounts were compromised daily in 2022, this number reportedly surged to 400,000 in 2023.

Scammers use hijacked accounts to impersonate "real friends or family members," making their requests for money or sensitive information far more convincing than traditional cold-call scams. This means a stolen account doesn't just harm the owner—it threatens their entire contact list.

8 essential tips to secure your accounts

Cybersecurity experts stress that an antivirus program alone is not enough; strong habits are essential. Here are the recommended measures for individual users:

1. Enable 2FA: Turn on Two-Step Verification (PIN) on WhatsApp and Two-Factor Authentication (preferably app-based) on Instagram.

2. Strong Passwords: Ensure passwords are unique, long (at least 12 characters), and include a mix of letters, numbers, and symbols.

3. Never Share Codes: Never share the 6-digit SMS verification code with anyone. Neither WhatsApp, Instagram, nor "support teams" will ever ask for this code.

4. Verify Requests: If you receive a message asking for money or urgent help, verify it through a different channel (voice or video call), no matter how convincing it looks.

5. Check Links: Before clicking links from unknown sources, carefully check the domain name. A single letter difference often indicates a fake site.

6. Official Stores: On Android, download apps only from the official Google Play Store. Avoid APK files from unknown sources.

7. Mobile Security: Install a reputable mobile security solution on your device.

8. Updates: Keep your operating system and apps updated to patch critical security vulnerabilities.

What to do if your account is hacked

If you suspect your account has been compromised, first ensure your email account is secure, change its password, and enable 2FA. Then, follow the "My account was hacked" recovery steps on the official support pages of Instagram or WhatsApp. If financial fraud has occurred, report the incident to law enforcement with screenshots of correspondence and payment receipts, and immediately warn your circle of friends.

www.wisenewspress.com