A familiar WhatsApp account can reportedly send a money request that its owner never sees. A story published by elDiario de Huesca on October 30, 2026, attributed a warning about that pattern to Spain’s Policía Nacional. The story described contacts receiving messages while the account holder retained apparent access to WhatsApp.
How the reported WhatsApp scam works
The Huesca story gave one example: someone says an online purchase cannot be paid because of an account limit, asks a relative to send Bizum to the purported seller, and promises to repay the money the next day. The request goes to a seller, rather than to the account holder, and leans on the trust built into a familiar chat.
The message pattern is similar to one described in an INCIBE advisory published October 14, 2026. INCIBE said people who contacted the institute reported that their contacts received money requests they could not see in their own chat history, even though they still had access to WhatsApp.
NeoTeo previously covered a separate WhatsApp impersonation warning in Jaén. The Huesca story’s purchase-and-Bizum example adds a different concrete pretext for the same broad risk: a message from a familiar account is not, by itself, proof that the account holder sent it.
Verify an unexpected request before paying
Call the person using the phone number you already have, or reach them through another channel. Don’t ask for confirmation in the same WhatsApp conversation. Be especially cautious if the message urges you to send money to a different number or claims that a payment must happen right away.
A familiar name, photo, or chat history can make the request feel routine. A separate call gives you a way to check with the person directly before sending money. INCIBE’s advisory recommends confirming an unexpected payment request through another channel.
Preserve evidence before recovering the account
If someone tells you that your account sent a suspicious request, first warn your contacts by phone, text, or another channel. Ask anyone who received a message to save the conversation and take screenshots. Record the dates, phone numbers, and payment details, if any, before deleting messages or reinstalling the app.
For iPhone users, INCIBE’s recovery sequence is specific: update iOS first, then back up WhatsApp conversations and check that the backup is complete before uninstalling and reinstalling WhatsApp. Register your phone number again in the app with the six-digit code you receive. Never share that code. Restore your backup when WhatsApp offers the option, then review linked devices and close any session you don’t recognize.
INCIBE said most of the consultations it handled about similar messages involved iPhones running versions earlier than iOS 18. Some involved iOS 26 versions earlier than 26.7. Those figures describe the consultations INCIBE received, and the institute said they do not mean every device on those versions is affected.
If the problem continues or you cannot regain access, contact WhatsApp Support. WhatsApp’s security guidance also recommends two-step verification and says users who lose account access can register their phone number again.
If money was sent, contact the bank immediately
Call your bank using its official contact channel, explain that the transfer was fraudulent, and ask whether it can try to stop or recover the payment. Keep the transaction record and report the incident to the appropriate authorities where you live. A bank may not be able to recover the money.
INCIBE’s 017 cybersecurity helpline is a Spain-based service. Its advisory also recommends reporting suspected misuse to law enforcement and contacting the bank immediately after a payment.
