New WhatsApp scam: Opening a single photo could empty your bank account - here’s how

A disturbing new WhatsApp scam has come to light after a man in Madhya Pradesh, India, lost nearly Rs200,000 from his bank account. The scam begins innocently: the victim receives a photo from an unknown number on WhatsApp with a request to identify the person in the image.

In this case, the victim initially ignored the message but gave in after receiving multiple calls from the same number. Once he opened the image, his phone was silently hacked. Cybercriminals used the opportunity to steal sensitive bank information and swiftly drained his account.

Unlike traditional phishing scams that rely on suspicious links or OTPs, this one uses a technique called steganography — where malware is embedded within image files. Once the image is opened or downloaded, the malware activates silently, granting hackers access to the victim's phone, apps, IDs, passwords, OTPs, and bank account details.

This method is especially dangerous because:

Once installed, the malicious software can:

Authorities, including Kerala Police, have also issued public advisories warning users to avoid opening or downloading any media from unknown contacts on WhatsApp or SMS.

As scams become more advanced, staying alert and cautious is the best defense. Don’t trust unknown messages — even something as simple as a photo can be a trap.