Business manager asks for 'money to open a bank connection' on WhatsApp — social engineering attack?

if you're not sure if he's typing with parameters just call bro what's 50k? just go call him directly but btw and ask if Ahmet's close friends on WatsApp got messages too i've seen guys like this scamming all the groups secretly...

WhatsApp takeovers are usually done via SMS OTP interception or SIM swap. The attacker clones the target's SIM or transfers the SIM to a new phone via social engineering with the operator. Then they log into WhatsApp and open a Web session. Things to check: 1) SIM indicator in the phone status bar, 2) Did the network operator name change, 3) Are there Web sessions in WhatsApp → Settings → Account → 'Linked Devices'.

bro, in cases like this it's either 100% a scam or Ahmet's phone was taken. either call him or go see him in person. honestly this info helps prevent the crime before it happens. but this isn't paranoia, it's a real situation — happens in all businesses...

Social engineering attacks are common in businesses. Things to watch out for: 1) Urgent money transfer request — red flag, 2) Profile pic changed — check it, 3) Different tone of language — deviations from the normal flow, 4) Verification via another channel — mandatory. It is recommended to include WhatsApp Security and SIM Swap Risk in corporate training.

Can I ask something: Does Ahmet message you every day? Is his writing style familiar? Like a 5-year friendship or something. These details matter. Most of the time, you know 'no, this isn't Ahmet' in these attacks. Just call him, talk. You won't be rude, on the contrary, what did he want, what did he say?

Are we really this paranoid? Maybe Ahmet's phone was stolen, or maybe he heard from an acquaintance that he urgently needed money and asked for it. Not everyone is planning to steal. But money is a different story questioning this much is fair — just check with him, Ahmet will understand.

edit: I wrote something wrong above, sorry about that.

I feel the same way. If you don't write this down from the start, it leads to arguments later.

I've been down this road, let me tell you. Taking measures without an inventory leaves doors you haven't seen open.

Good luck with that.

I'm curious too.

We got stuck at the same point for a while. The real issue isn't the number, but what it's based on.

Trying to do this alone is the most expensive way. Good luck with that.

I agree. If you get three different answers on a topic, the question was asked wrong.

If you scold false alarms, nobody will report again. That's all, sorry if I went on too long.

Timely topic.

We experienced almost the exact same thing last year. Hasty decisions become decisions you have to fix six months later.

Of course, it varies if your situation is different.

Yes, that's exactly how it is with whatsapp scam business. The biggest time-waster for us was not knowing who had the final say.

Everything goes well for the first three months; problems arise in the fourth.

Noted, thanks. Having backups accessible on the same network and with the same identity makes them part of the target.

If you have questions, write them; I'll answer as best I can.

There are three things to check when doing this. Forgotten test environments are more often the entry point than live systems.

Hasty decisions become decisions you have to fix six months later.

I'd appreciate it if you shared the outcome. Taking notes for two weeks yields better results than a six-month estimate.

Correct me if I'm wrong.

The cheap-looking path usually ends up costing more later. Don't rely on a single measure; go layer by layer.

If you post the result here, it will help others too.