New Delhi: The Ministry of Electronics and Information Technology (MeitY) has issued a public advisory warning users about a cyber campaign dubbed “GhostPairing” that is being used to take over WhatsApp accounts.
According to the Ministry, cyber offenders are exploiting WhatsApp’s device-linking feature to gain unauthorised access by generating pairing codes that do not require additional authentication.
The campaign typically begins with victims receiving a message from a trusted contact, often reading “Hi, check this photo,” along with a suspicious link.
The link displays a Facebook-style preview and redirects users to a verification process that asks for their phone number.
Once the number is entered, attackers are able to link their device to the victim’s WhatsApp account.
MeitY noted that the method allows hijackers to gain complete access to accounts without stealing passwords or carrying out SIM swapping. Once compromised, the attackers can continue spreading the scam through the victim’s contacts.
The Ministry has advised citizens to avoid clicking on unknown or suspicious links, refrain from entering phone numbers on external websites, and regularly review the “Linked Devices” section in WhatsApp settings to detect any unauthorised access.
