Overview

• Phishing SMS in Mexico have surged since early July, directing users to fake WhatsApp verification sites that claim a 24-hour deadline to submit codes.
• Argentine cybersecurity agencies and telecommunications providers have issued urgent advisories alerting users to a spike in account hijacking attempts.
• Attackers rely solely on social engineering to trick victims into sharing legitimate SMS-sent verification codes, enabling them to seize WhatsApp accounts without malware.
• Once inside, cybercriminals harvest personal data, drain bank or digital wallet balances within seconds and solicit money from the victim’s contacts.
• Users are urged to enable two-step verification, never share codes, verify unusual requests with known contacts, block suspicious numbers and follow WhatsApp’s recovery protocols if hijacked.