A WhatsApp profile name, photograph or familiar contact is not proof that a message is genuine. Accounts can be compromised and people can be impersonated.
Be cautious when a message suddenly asks for money, a one-time password, a verification code, personal information, a link to be opened or a file to be downloaded.
If the request appears to come from someone you know, verify it through another trusted method. A separate phone call or another established contact method can help you confirm whether the request is really from them.
Never share your WhatsApp registration or verification code because someone in a message asks for it. Treat unexpected code requests as a serious warning sign.
You can use Cyber Conduct's Suspicious Message Check to work through common warning signs without entering private credentials or other secrets.
If you clicked a link, shared information, sent money or believe your WhatsApp account was compromised, move to the relevant Get Help guide rather than treating it only as a suspicious-message question.