Cyber crooks have found away to infect victims’ devices without their knowledge.
16:23, 05 Feb 2026
WhatsApp users have been issued a red alert has a worrying scam is infilitrating devices.(Image: Rafael Henrique/Getty Images)
WhatsApp users have been placed on red alert as a new worrying scam has infiltrated the messaging app. In order to keep your device and personal information protected, people are being urged to change one setting immediately.
Fraudsters are constantly looking for new ways to con innocent people into passing over their personal and financial data. However, due to more people becoming wary of suspicious email links and phone calls, cyber crooks are finding new ways to infect our tech.
WhatsApp is a regular target for scammers and has recently been thrust into the spotlight after a flaw was detected in its system. Unfortunately, this flaw has allowed hackers the ability to access users personal data by simply sending files to their smartphones.
Highlighted by Google’s Project Zero team, the issue stems from the app’s automatic download function, which instantly saves media to devices, reports the Mirror. While this is handy for saving files from the family group chat, it can be a worrying feature when capitalised by crooks.
WhatsApp users are being urged to remain on high alert as it is believed that fraudsters are creating fake group chats and inviting unsuspecting users to join. These chats are said to be loaded with infected files.
If someone goes on to accept the invitation, these corrupt files will automatically be downloaded to the recipient’s device without them knowing. This means that even if you leave the chat after accepting the invite, the files will already be wreaking havoc on your device.
Scammers are adding unsuspecting victims to group chats that are infested with corrupt files.(Image: Jonathan Raa/Getty Images)
At the moment it is unknown how many people have been affected by this scam. However, with billions of people currently using the messaging service daily, this ongoing scam is clearly a threat.
Since being notified of the bug, WhatsApp has pushed out an update that should help block any new infections. While this is helpful in the short term, this bug has highlighted a problem for the automatic download setting.
Thankfully for those wanting to add some extra protection to their devices, this setting is easy to disable. Additionally, the team at Malwarebytes recommends enabling WhatApp’s Advanced Privacy Mode.
To turn off downloads, simply open WhatsApp on your Android device and tap the three-dot menu in the top-right corner. This should then show a settings option.
Join the Daily Record WhatsApp community!
Get the latest news sent straight to your messages by joining our WhatsApp community today.
You’ll receive daily updates on breaking news as well as the top headlines across Scotland.
No one will be able to see who is signed up and no one can send messages except the Daily Record team.
All you have to do is click here, select ‘Join Community’ and you’re in!
We also treat our community members to special offers, promotions, and adverts from us and our partners. If you don’t like our community, you can check out any time you like.
To leave our community click on the name at the top of your screen and choose ‘exit group’.
If you’re curious, you can read our Privacy Notice.
After that head to Storage and Data, where you should see Media Auto-Download. Under that you will see sections for when using data, when connected to Wi-Fi, and when roaming.
Tap each of these sections and uncheck all media types – photos, audio, videos and documents. After clicking OK, each category should confirm the switch by stating something like ‘no media’ under it.
For Apple devices, the Storage and Data section can be found on your profile tab. From there select off for each auto-download media.
Malwarebytes also advises that it is a good idea to lock down on who can add you to group chats. By reducing this, it will lower the chances of a cyber crook reeling you into their latest scam.
To this click Settings, tap Privacy and then hit Groups. From there change from Everyone to My Contacts or My Contacts Except… this will allow you to exclude any numbers you do not fully trust.
