WhatsApp Voting Scam: Swiss Warn of Hijacked Accounts

A WhatsApp voting scam is sweeping across Switzerland right now. It starts with a friendly message from someone you know. It asks you to vote for “Sophie”, a friend’s daughter, in a quick contest. One tap later, you could lose your whole account. Searches for “Betrug”, the German word for fraud, jumped in Switzerland this week as the warnings spread. So how does the trick work, and how do we stay safe? Let’s break it down in plain words.

What the WhatsApp Voting Scam Looks Like

On October 27, 2026, Switzerland’s Federal Office for Cyber Security (BACS) issued a fresh warning. It said it is seeing another big wave of stolen or hijacked WhatsApp accounts. In October alone, it received more than 50 reports of this trick. Many attacks worked, according to the BACS weekly review.

The message always comes from a contact in your own address book. That contact’s account has already been taken over. The text plays on our wish to help. A typical version says the vote ends soon and takes under a minute.

The name in the message can change. Earlier this year, the girl was called “Sofia”. Now it is mostly “Sophie”, as Blick reported. Some versions talk about a school contest. Others mention a dance competition.

Why a Message From a Friend Feels Safe

Most of us ignore texts from strangers. But this one comes from a real friend’s profile. That trust is the whole trick. Add a short deadline, and many people click before they think. To dodge security filters, the criminals also keep switching the web addresses behind their links, BACS says.

How the Fake Vote Hijacks Your Account

The link opens a polished fake website. It shows a school or dance contest, often with photos of girls and vote counts. When you press “vote”, the site asks you to “verify” yourself. It uses one of two methods, and both are traps.

Trap One: The Six-Digit SMS Code

First, the site asks for your phone number. Then it asks you to type in a code you get by text message. That code is really WhatsApp’s official six-digit registration code. Once you enter it on the fake page, the scammers can activate your account on their own phone. You get logged out, and they take over.

Trap Two: The QR Code Scan

Other times, the site shows a QR code. That’s a square barcode your phone camera can read. It tells you to scan it using WhatsApp’s “Linked devices” feature. This feature is normally used for WhatsApp Web, the version of the app on a computer.

Scanning the code quietly links your account to the criminals’ system. This trick is sneaky because you may never notice. Your app keeps working as normal, while someone else reads along.

What Hijackers Do With a Stolen Account

Once inside, the attackers can see your chats, groups, shared photos, and private details. Then they send the same fake vote request to everyone in your contacts. Each new victim spreads it further. BACS calls this a snowball effect, and it explains why the scam is spreading so fast.

Some attackers also push false information into group chats, the Swiss NCSC review from May noted. That is a real worry for small firms too. Many use WhatsApp to talk with staff, suppliers, and customers. A hijacked work account could send fake requests in a trusted colleague’s name.

Swiss Authorities Track a Growing WhatsApp Scam

This is not a brand-new threat. BACS first warned about the voting trick in May 2026. More reports came in September. Now the office says the method has “established itself” and seems to be working.

The Zurich cantonal police’s cybercrime team has warned about it too. By October 10, its platform had logged 24 reports of the scam, according to 20 Minuten. Its own case note on cybercrimepolice.ch describes the fake dance contest in detail. Swiss public broadcaster SRF also covered the warning on its consumer show Espresso.

Fraud Leads Swiss Cyber Reports

The bigger picture matters here. In the first half of 2026, BACS received 27,128 voluntary reports of cyber incidents. Fraud remained the most common type, the office said in its half-year report. It also warned that criminals now use AI to make scams more personal and convincing.

There was some good news, though. Fake calls from people posing as officials dropped by more than 75% in July 2026. That came after Switzerland widened rules for labelling foreign calls that use spoofed Swiss mobile numbers, BACS said. So clear rules can work. Messenger scams, however, are harder to block at the network level.

What Meta Has Done About WhatsApp Account Hijacking

WhatsApp is owned by Meta Platforms (META). In March 2026, Meta launched new anti-scam tools across its apps. One is a device linking warning on WhatsApp. It alerts you when a link request looks suspicious and shows where it comes from, according to Meta’s announcement.

Interestingly, Meta used a fake “talent competition” vote as its own example, TechCrunch reported. Meta also said it removed over 159 million scam ads worldwide in 2025.

Still, there’s a gap. Blick points out that the warning covers QR-code linking, not the SMS-code trick. So the app can’t catch every case for us. Our own habits still matter most. Meta has faced scam pressure before. We saw that when WhatsApp shut down 6.8 million accounts linked to scam centres.

How to Protect Yourself From the WhatsApp Voting Scam

The good news is that a few simple steps block this WhatsApp voting scam almost completely. Here is what BACS and the police advise:

• Be wary of any vote request. This applies even when it comes from a close friend or family member.
• Check through another channel. Call or text the sender to ask if they really sent it.
• Never share your six-digit code. WhatsApp will never ask you to type it on a website.
• Don’t scan unknown QR codes. Use “Linked devices” only for your own laptop or tablet.
• Turn on two-step verification. Go to Settings, then Account, then Two-step verification, and set a PIN.

That last step is the big one. BACS says a PIN makes an account takeover many times harder. It takes about a minute to set up.

What to Do if Your Account Was Taken Over

If you already fell for it, act fast. First, warn your contacts by phone, SMS, or email. Tell them not to click links that seem to come from you.

Next, fix the account. If you scanned a QR code, open Settings, then Linked devices. Tap any device you don’t know and choose “Log out”. If you typed in an SMS code and got logged out, sign in again with your phone number. You’ll get a new code, and entering it logs the attackers out.

There is one catch. If the criminals set their own PIN, you may need to wait seven days to log back in. Even so, they stay locked out during that time. The Zurich police also advise filing a report and sending scam web addresses to [email protected].

Fraud like this can hit savings, not just chats. Swiss banks see it too, as our look at how the Swiss banking ombudsman resolved 2,500 fraud cases showed. Other places are moving to tougher laws, like Singapore’s new scams bill with fines for platforms.

Conclusion: Stay One Step Ahead of the WhatsApp Voting Scam

The WhatsApp voting scam works because it uses our kindness against us. A trusted name, a short deadline, and one code are all it takes. Swiss officials logged more than 50 reports in October alone, and the real number is likely higher.

Yet the fix is simple. Never share your WhatsApp code, never scan strange QR codes, and set a PIN today. If a friend asks you to vote, call them first. We think that small pause is the best defence we have right now.

FAQs

What is the WhatsApp voting scam?

It is a trick where a hacked contact asks you to vote for a child in a contest. The link leads to a fake site that steals access to your WhatsApp account.

How many people reported the WhatsApp voting scam in Switzerland?

BACS said it received more than 50 reports in October 2026 alone. Many of those attacks were successful, so the account was actually taken over.

Why should I never share my six-digit WhatsApp code?

That code lets someone register your account on their own phone. If a scammer gets it, they can log you out and read or send messages as you.

How can I get my hijacked WhatsApp account back?

Log out unknown devices under Settings, then Linked devices. If you were logged out, sign in again with your number. If the scammers set a PIN, you may wait seven days.

Does WhatsApp warn users about suspicious device links?

Yes. Since March 2026, WhatsApp can warn you when a device link request looks suspicious. However, Blick reports the warning does not cover the SMS code trick.

Explore Smarter Stock Research With Meyka

Scams and safety tools can shape how investors view big tech names like Meta Platforms. Good data helps you keep up. Meyka is an AI-powered stock research and alternative-data platform. It helps you track companies, markets, and trends in one place. If you are interested in the stock market, check out Meyka and see how it can support your research.

Disclaimer: This article is for informational purposes only and is not financial advice. Always do your own research or consult a licensed financial advisor before making investment decisions.