A message from a friend begs you to vote for him in a contest. The link seems real, but it leads to a fake site that requires a verification code. In those moments, the scammers take control of your account. the neighbourhood information network in the Flemish Ardennes (Belgium) has launched a formal alert to stop this wave of fraud.

(Staff: Belgium / Technology & Security)

In a world where communication has moved massively on phones, trust is the most vulnerable currency. When you receive a message from a friend or relative, your instinct is to help them, especially if you are asked for a trivial thing: a vote for a contest. But, exactly in this moment of relaxation, one of the most treacherous digital traps of the moment is triggered.

This method of attack is called „Ghost Pairing” (ghost pairing). Crooks don’t break your password by brute force, but trick you into opening their door.

The perfect bait: the vote

It all starts with a seemingly innocent message on WhatsApp: a known contact asks you to vote for him or a family member in a contest (for example, a photography contest or an artistic project). You are sent to a link that looks exactly like an official voting page.

Once on the site, the platform asks you for a „confirmation code” to validate the vote. And here comes the trap. You are not on a vote site, but on a fake portal. The code the scammer asks you for is not a voting code, but the pairing code for a new device (Pairing Code) for your WhatsApp account.

If you enter that code, the app allows offenders to connect their own device to your account. With a single tap on the screen, your account becomes a „ghost” controlled by someone else.

What happens after taking over the account?

Once the crooks have access to your account, they do not lock you out. On the contrary, they use it to fool all your other contacts. They will send the same message to everyone in your phonebook, asking for money on your behalf or continuing the chain of fake votes. Because the message comes from your account, your friends will trust the message and may become victims themselves.

How do you protect yourself. The Three Vital Steps

The authorities in Belgium, through the Neighborhood Information Network (BuurinformatieNetwerk), send a clear message: maximum vigilance. Here’s what you need to do:

1. Check your connected devices: Go to the settings of the WhatsApp application and look for the „Linked Devices” option. Here you will see all the computers or phones that have access to your account. If you see a device you don’t recognize, disconnect it right away!
2. Never Share Codes: The Golden Digital Security Rule: Never provide SMS or WhatsApp verification codes, no matter who asks for them. Not even a friend. If a friend asks you for a code, their account may already be compromised.
3. Enable two-step verification: This is the strongest armor of your account. Go to Settings -> Account -> Two-step verification and set a PIN. Thus, even if criminals obtain a code, they will not be able to take over the account without this PIN.

Conclusion

The “Ghost Pairing” scam is a harsh demonstration of the fact that, in the digital age, the greatest vulnerability is not technology, but human psychology. Criminals exploit goodwill and desire to help. The message of the network in the Flemish Ardennes is simple: „Together we ensure our safety”. And the first step to safety is to be alert. Not every link that promises you a friend’s help is innocent. Sometimes, a digital ghost is hiding behind the link, intent on stealing your digital identity.