iPhone Users Vulnerable to WhatsApp Hack

November 11, 2025 • 4 min read • by Malloc

WhatsApp’s call-forwarding scam — also known as the “Silent Scam” or “Verification Code Theft” — is spreading rapidly worldwide. Unlike traditional malware, it doesn’t require installing any malicious apps. Instead, it exploits telecom features and human trust.

⚠️ What Is the WhatsApp Call-Forwarding Scam?

Attackers convince victims to dial special codes (like *21#) that forward all calls to the scammer’s number. The scammer then uses WhatsApp’s call-based verification system to take over the victim’s account — even on iPhones, which were previously thought to be safer.

🧩 How the Scam Works

• Scammer calls and asks the user to dial a code “to verify a delivery.”
• User unknowingly activates call forwarding to the attacker’s number.
• Attacker registers WhatsApp using the victim’s number and receives the verification call.
• Scammer enables two-step verification, locking out the real user.

The victim’s contacts then receive messages asking for emergency money or sensitive data — all while calls to the victim go to the attacker.

🛡️ How to Defend Against It

• Never dial codes from unknown callers.
• Check if call forwarding is active: dial *#21#.
• Disable all forwarding: dial ##002#.
• Enable two-step verification in WhatsApp settings.
• Report suspicious messages directly in the app.

🔒 How Malloc Helps

Malloc’s Privacy & Security VPN actively blocks phishing, scam, and spyware domains. Its malicious app scanner and real-time protection features detect unusual behavior from apps or calls, helping you stay one step ahead of attackers.

Stay private. Stay protected. Download Malloc today.

References:
- WhatsApp Scams 2025: Your Guide to Staying Secure
- How to Stop Call Forwarding on iPhone & Android
- The Hindu: WhatsApp account of a businessman hacked, friends duped
- Keepnet: WhatsApp Hacking Methods 2025