WhatsApp hijacking cases surge 154% to 2,020; manager loses $12m

Hong Kong recorded 2,020 instant messaging account hijacking cases in the first seven months of this year, a 154 per cent increase from the same period last year, with losses totalling HK$150 million.



WhatsApp accounted for 99 per cent of the cases.



In one case, a financial manager at an investment company lost HK$12.2 million after transferring funds following instructions sent through his supervisor's hijacked account.



In another case, a businessman lost over HK$10 million after falling victim to a deepfake voice message imitating his father.



Police said most hijackings began with phishing messages impersonating WhatsApp's official service centre, using urgent warnings about account suspension to trick victims into clicking fake links.



Scammers also use search engine poisoning to place fraudulent websites at the top of search results.



Once victims enter their phone number and verification codes, scammers gain full control of their accounts.



Cyber Security and Technology Crime Bureau Superintendent Rachel Hui Yee-wai said scammers study chat history to mimic communication styles and even use deepfake technology to create realistic voice messages.