Türkiye’s Cybersecurity Presidency warned of rising complaints about WhatsApp and similar accounts being taken over to solicit money from users’ contacts. Its 4 November statement said malware targeting vulnerabilities in outdated iOS software could be used in some attacks.

Scammers can use a real contact’s account

Attackers impersonate the owner and request urgent transfers to an IBAN. A message from a familiar person’s genuine account may not have been written by that person. The authority urged recipients to verify money requests by calling the person concerned.

The warning does not mean every iPhone has been compromised or every message is dangerous. The statement did not identify a particular vulnerability number or provide an all-model device list.

How to check iPhone updates

Apple’s official guide directs users to Settings > General > Software Update to check updates available for their device. Apple recommends making a backup first. Automatic update options can be managed there too. WhatsApp should also be kept up to date through the app store.

Keep verification codes private

WhatsApp recommends two-step verification and says registration codes must never be shared. Review Linked Devices and remove unfamiliar sessions. The Cybersecurity Presidency cautioned that sophisticated unauthorised access may not always appear in that list.

Recovering a compromised account

WhatsApp’s recovery guide explains re-registering a number with the six-digit code received by SMS or call, provided the device is safe. An additional verification PIN can affect the recovery process. Changing a password alone does not replace the account re-registration needed to remove an intruder.

The authority advised warning contacts through another channel and retaining suspicious messages and IBAN details. Anyone who has sent money should contact their bank promptly. Other account passwords should be changed from a safe device, and evidence preserved for the relevant authorities.