A reported September 22, 2026 alert from Spain’s Guardia Civil describes a WhatsApp account-takeover scheme involving certain older iPhones. The alleged “zero-click” method means the victim supposedly does not need to click a link, scan a QR code or hand over a verification code before the account is accessed. The attackers then use genuine conversations and the victim’s phone number to ask trusted contacts for urgent money transfers.

The report places the incidents in Spain and associates them with older iOS versions around the iOS 16.7.12 threshold. It also links the alert to around 50 reported complaints in Huelva from late August. Separately, four cases were reported in La Rioja, including one individual loss of €2,000.

How the reported WhatsApp scam works

“Zero-click” describes the alleged entry point, not the money-making stage. In this case, the reported scenario involves account access before the victim clicks a link, scans a QR code or shares a code. Once inside, the attacker can allegedly write to contacts from the legitimate account, where the familiar phone number and conversation history make the request look credible.

The next step is social engineering: an urgent request for a transfer or for an SMS or recovery code. The reported goal is to turn trust between friends or relatives into the mechanism for the fraud.

The reports also describe messages being removed from the legitimate owner’s view through WhatsApp’s “Delete for me” function on a linked device. That behavior is presented as part of the alleged account takeover and concealment process.

Which iPhones are associated with the alert?

The reports refer to certain iPhone models running older iOS versions around iOS 16.7.12 and earlier. The alert does not establish that every iPhone, every device on iOS 16.7.12 or every outdated WhatsApp installation is affected.

That distinction matters because the reported threshold is narrower than a blanket warning about all iPhone users. If your iPhone can install a newer iOS release, update it. WhatsApp should be updated as well.

Checks to make on your iPhone today

  • Update iOS and WhatsApp. Install the latest versions available for your device and app.
  • Review linked devices. In WhatsApp, inspect the linked-device list and close any session you do not recognize.
  • Enable two-step verification. This adds a PIN-based protection layer to the account.
  • Keep codes private. Do not share SMS verification codes, recovery codes or two-step-verification details with anyone who asks through a message.
  • Treat urgent requests as unverified. A familiar name and chat history are not enough reason to send money.

What to do when a contact suddenly asks for money

Call the person using a separate phone number or another trusted channel before transferring anything. Do not rely on the WhatsApp conversation alone, especially when the request is urgent, unusual or asks for a code.

If you suspect that your account has been taken over, warn your contacts, close unfamiliar linked-device sessions, reinstall WhatsApp if necessary, enable two-step verification, and update both WhatsApp and iOS. Preserve screenshots, messages and transaction records.

If money has already been sent, contact the bank immediately and report the incident to law enforcement.