Explained: WhatsApp ghost pairing, scammers' new favourite trick to steal your photos and videos

whatsapp

WhatsApp has become one of the most widely used communication platforms in India, storing years of personal chats, photos, videos, and documents. As usage grows, so do the methods scammers use to exploit trust. One such emerging threat is WhatsApp ghost pairing, a technique that allows attackers to secretly access a user’s messages and media without hacking passwords or triggering obvious security alerts.

Unlike traditional account takeovers, ghost pairing operates quietly in the background, making it difficult for users to detect until real damage has already been done.

WhatsApp ghost pairing is a scam that misuses WhatsApp’s “Linked Devices” feature. This feature is designed to let users access their WhatsApp account on multiple devices, such as a laptop or tablet, without needing the phone to stay connected to the internet.

Scammers exploit this legitimate functionality by tricking users into linking an unknown device to their account. Once the pairing is complete, the attacker can view messages, photos, videos, and sometimes even documents in real time, while the victim continues using WhatsApp normally.

The scam usually starts with social engineering rather than technical hacking. Victims may receive a message or call claiming to be from WhatsApp support, a company HR team, a delivery service, or even a known contact whose account has already been compromised.

In most cases, the scammer creates urgency. They may warn about account suspension, verification failure, or a job opportunity that requires immediate action. The user is then asked to share a verification code or scan a QR code. That QR code is actually used to link a new device to the victim’s WhatsApp account. Once linked, the attacker’s device silently syncs with the account. The victim remains logged in, receives messages as usual, and often has no reason to suspect anything unusual.

One of the most dangerous aspects of ghost pairing is its invisibility. There is no forced logout, no sudden app crash, and no clear warning that someone else is watching. Notifications continue to arrive, chats open normally, and calls work as expected.

Many users rarely check the “Linked Devices” section in WhatsApp settings. This allows scammers to maintain access for long periods, collecting private photos, videos, and conversations that can later be misused for fraud, blackmail, or identity theft.

Scammers rely heavily on emotional pressure. Messages often create panic or urgency, pushing users to act without verifying details. Impersonation is common, with attackers posing as officials, employers, or trusted contacts. Some scams are carefully timed around job searches, festive seasons, or delivery schedules, making them appear more believable.

The success of ghost pairing depends less on technical skill and more on manipulating human behaviour.

Staying safe starts with awareness. Never share WhatsApp verification codes with anyone, regardless of how convincing the request appears. Avoid scanning QR codes sent through messages, emails, or social media.

Users should regularly check the “Linked Devices” section in WhatsApp settings and immediately remove any unfamiliar devices. Enabling two-step verification adds an extra layer of protection and makes unauthorised access harder.

Most importantly, pause when a message creates urgency. Taking a few seconds to verify the source can prevent weeks or months of privacy loss.