WhatsApp Web Scam Targets Companies as Hackers Impersonate CEOs in Multi Crore Fraud
Cyber criminals are using phishing emails and compromised WhatsApp Web sessions to trick employees into urgent money transfers raising concerns among companies and prompting fresh warnings from authorities in India

A new wave of cyber fraud has raised alarm in corporate circles after multiple companies reported financial losses linked to compromised WhatsApp Web accounts. Authorities say hackers are now using sophisticated tactics to impersonate top executives and pressure employees into transferring large sums of money.
According to officials in Hyderabad, the scam typically begins with a carefully crafted phishing email sent to company employees. These emails appear legitimate and often mimic internal communication. Once the recipient clicks on the malicious link, malware is silently installed, giving attackers remote access to the system.
What makes this fraud particularly convincing is the next step. After gaining control, attackers target active WhatsApp Web sessions already logged into the system. Using the genuine account, they send messages to finance teams or accountants, posing as senior executives such as CEOs or CFOs. Since the message originates from a trusted account, employees are more likely to act without suspicion.
Investigators say the attackers often create a sense of urgency. They claim to be stuck in meetings or unavailable for calls, instructing staff to process immediate transactions. This psychological pressure, combined with the authenticity of the account, has led to several cases where companies lost significant amounts of money within minutes.
The scale of the fraud has prompted concern among businesses, especially those handling high value transactions. Cybercrime officials warn that such attacks are becoming more frequent and increasingly targeted, focusing on individuals with financial authority within organizations.
To counter the threat, authorities have issued strict advisories. Companies are being urged to introduce mandatory verification processes before approving any financial transaction. Employees are advised to confirm requests through direct voice calls or alternative channels, even if the message appears to come from a senior executive.
Security experts also recommend strengthening digital defenses by using updated antivirus systems and firewalls. Avoiding suspicious links and ensuring regular software updates can significantly reduce the risk of malware infections.
Another key precaution involves better handling of WhatsApp Web sessions. Users are encouraged to log out immediately after use, especially on shared or office systems. Regular cybersecurity training for employees is also being emphasized to help them identify and respond to phishing attempts.
In case of any suspected fraud, individuals and organizations are advised to report incidents immediately through the national cybercrime helpline or official online portals. Quick reporting can improve the chances of limiting financial damage and tracing the perpetrators.
As cybercriminals continue to evolve their methods, this latest scam highlights the importance of vigilance and verification in an increasingly digital workplace.





