Cybersecurity groups have issued an advisory about a phishing campaign circulating through WhatsApp that falsely promises users a financial reward under a so called “PKH 500000” offer. Security researchers have warned that the messages are designed to deceive recipients into clicking malicious links that can compromise personal information, banking details, or even take control of their WhatsApp accounts. The fraudulent campaign has been shared through both personal and business WhatsApp accounts, making it appear more convincing to unsuspecting users.
According to cybersecurity advisories, the scam typically begins with a message claiming that the recipient is eligible to receive financial assistance or a cash reward. The message often includes an attractive image promoting a large cash prize and urges users to click a link to register or claim the amount. Security experts have explained that these messages are not connected to any legitimate financial assistance program and are instead intended to lure victims into visiting fraudulent websites. Once users access these websites, they may be asked to provide personal information such as their full name, national identification details, banking credentials, or other sensitive data. In some cases, victims may also be prompted to download malicious software or enter one time verification codes that can be used to hijack their WhatsApp accounts.
Cybersecurity groups have emphasized that the objective of the campaign is identity theft and financial fraud. By collecting confidential information or gaining unauthorized access to messaging accounts, cybercriminals can conduct additional scams, impersonate victims, or attempt unauthorized financial transactions. Security researchers have noted that phishing campaigns continue to evolve by using trusted platforms such as WhatsApp to increase the likelihood of user interaction. Messages often create a sense of urgency or excitement by advertising limited time rewards or exclusive offers, encouraging recipients to act without verifying the authenticity of the information. Experts have advised users to remain cautious whenever they receive unsolicited messages promising cash rewards, financial assistance, or other unexpected benefits, particularly when accompanied by external links.
Cybersecurity organizations are encouraging WhatsApp users to avoid clicking suspicious links, refrain from sharing personal or banking information through messaging platforms, and verify any financial assistance claims through official government or organization websites. Users are also advised to enable two factor authentication on their WhatsApp accounts, keep their applications updated, and report suspicious messages directly through WhatsApp’s reporting feature. Security professionals have reiterated that awareness remains one of the most effective defenses against phishing campaigns, as cybercriminals continue to exploit social engineering techniques to target individuals. By exercising caution and verifying information before taking action, users can significantly reduce the risk of becoming victims of scams designed to steal personal information, financial data, and access to digital accounts.
Follow the SPIN IDG WhatsApp Channel for updates across the Smart Pakistan Insights Network covering all of Pakistan’s technology ecosystem.
