A customer receives a WhatsApp message from what appears to be your brand. The profile has your logo, your business name, and a tone that sounds just like your support team. The message says their order is delayed and asks them to click a link to reschedule delivery. They do. They hand over their payment details. They never hear from "you" again.
Your brand had nothing to do with it. But your customer does not know that yet.
This is how fake WhatsApp Business accounts work. Fraudsters clone a brand's visual identity, set up an account that looks credible at a glance, and use it to run scams ranging from fake customer support to fraudulent order updates and payment requests. By the time complaints arrive, the reputational damage is already in motion.
The scale is significant. In the first half of 2025 alone, WhatsApp shut down more than 6.8 million accounts traced to criminal scam operations, many using AI-generated messages to contact victims. This post covers what these accounts look like, how to spot them, how to report them, and what you can do to make your legitimate account harder to impersonate.
What Fake WhatsApp Business Accounts Actually Look Like
Unlike email, where a sender's domain can give away a fake, WhatsApp lets anyone set a profile name and photo that is identical to a legitimate brand's. There is no technical barrier stopping a fraudster from calling their account "[Your Brand] Support" and uploading your logo as the profile picture.
The most common impersonation formats include:
- Profile cloning: The fraudster copies your brand name, profile photo, and business description to create an account that looks like your official presence. They then reach out to customers directly with fake offers, payment requests, or support messages.
- Fake order and delivery updates: Messages claiming a parcel is held, a payment failed, or a delivery needs to be rescheduled. These typically include a link to a phishing page designed to harvest card details or login credentials.
- Fake customer support: An account poses as your support team, responding to customers who have complained publicly on social media or who have been targeted based on purchase data. The "agent" collects account information under the guise of resolving a problem. For a broader look at this threat across channels, see our post on fake customer support numbers hijacking your brand.
- Fake promotional messages: Accounts send unsolicited messages about exclusive discounts or prize wins, directing recipients to fraudulent payment pages.
- Fake brand groups: WhatsApp groups set up to look like official brand communities, used to distribute malicious links or collect personal information under the cover of a trusted name.
Why WhatsApp Is a Particularly Exposed Channel
On most platforms, a verified badge or domain name gives customers a way to cross-check legitimacy. WhatsApp offers no such signal for standard or unverified Business accounts. A fraudster's profile and your real one can look almost identical to someone who is not checking the phone number carefully. The personal feel of a messaging app also means people are more likely to act quickly rather than stop to verify.
How to Spot a Fake WhatsApp Business Account
Customers are often the first to flag something is wrong, but by then the harm may already be done. As a brand, knowing what to look for helps you identify impersonation earlier and respond before it spreads.
Signs that a WhatsApp Business account may be fraudulent:
- The phone number does not match the official number published on your website or marketing materials
- The account has no verified badge (a blue tick next to the business name), particularly for brands that have completed Meta's verification process
- The profile description contains spelling errors, generic language, or slightly altered brand names
- Messages arrive unsolicited, without any prior opt-in from the customer
- The account creates urgency around payments, deliveries, or account security
- Links in messages do not go to your official domain
- The account asks for sensitive information (card details, passwords, OTPs) via chat
No legitimate business will ask for payment credentials or one-time passwords through a WhatsApp message. If you see customers reporting interactions that do not match your actual communications, treat it as a live impersonation incident.
It is also worth monitoring your brand name on WhatsApp proactively. Ask your customer service team to flag any queries that reference WhatsApp conversations your brand did not initiate. These reports are often the earliest warning you will get.
How to Report a Fake WhatsApp Business Account
When you or a customer identifies a fraudulent account, reporting it to WhatsApp directly is the right first step. Here is how to do it:
- Open the chat with the account you want to report
- Tap the account name or number at the top of the chat to open the profile
- Scroll down and select Report
- Choose the most relevant reason if prompted
- Tap Block to prevent further contact from that number
WhatsApp reviews reported accounts and can remove those found to be in violation of its Business Messaging Policy, which explicitly prohibits impersonating another business or misleading customers about the nature of an account.
What to Document Before You Report
Before submitting a report, capture as much evidence as possible. This is important if you need to escalate beyond WhatsApp's in-app process:
- Screenshot the full profile, including the display name, phone number, and profile photo
- Screenshot any messages sent to customers
- Note the date and time of discovery
- Save any links the account shared
Thorough documentation gives you a usable record if the account disappears before WhatsApp acts, and it supports any further enforcement steps you take.
If the Account Links to a Fake Website or Domain
Fake WhatsApp accounts rarely operate in isolation. If the account is directing customers to a fraudulent website or phishing page, that asset needs to be reported and removed separately. Reporting the WhatsApp account alone does not take down the linked infrastructure. Brand impersonation on social media commonly involves exactly this kind of multi-channel abuse, where the messaging app is just one entry point into a wider scam network.
Getting a Verified WhatsApp Business Badge
A verified badge is the blue tick that appears next to a business name in WhatsApp. It signals to customers that the account has been confirmed by Meta as belonging to a legitimate business. Critically, it is the one thing a fraudster cannot copy: the badge is assigned by the platform, not added to the profile by the account holder.
Verification on WhatsApp is available through Meta Verified for Business, which offers tiered plans. Depending on the plan you choose, Meta Verified for Business can also include impersonation protection, where Meta monitors for accounts pretending to be you. Plan features change regularly, so check the current tiers before you subscribe.
To get verified, you will need to:
- Use the WhatsApp Business app (in markets where Meta Verified is available) or the WhatsApp Business Platform
- Submit official business documentation to Meta, such as a business registration or tax document matching your company name and address
- Have your display name approved by Meta
- Subscribe to Meta Verified or apply for verification once your account is active
Verification does not make impersonation impossible, but it significantly reduces how convincingly a fraudster can clone your account, and it gives customers a clear signal to distinguish the real account from a fake one.
For brands that communicate regularly with customers via WhatsApp, completing this process is one of the most practical steps available to reduce impersonation risk.
Keeping Ahead of Impersonation
Reporting individual accounts and applying for verification are both important steps, but they are reactive by nature. Fraudsters rebuild quickly, and a new fake account can appear within hours of the previous one being removed.
Remove.tech's brand protection platform monitors social media, messenger services, search engines, and websites around the clock for unauthorised use of your brand. When a fake account, fraudulent domain, or linked phishing page is identified, the platform handles structured removal and de-indexing with documented evidence at every stage. To see whether fake accounts or sites are already using your brand, request a free brand audit.
FAQ
Can anyone set up a WhatsApp Business account using my brand name?
Yes. WhatsApp does not verify business names when an account is created on the standard WhatsApp Business app. Anyone can set a display name and profile photo identical to yours. This is why verification and proactive monitoring matter.
How do I report a WhatsApp account impersonating my brand?
Open the chat, tap the account name or number, scroll down to Report, select the relevant reason, and block the account. Document everything with screenshots before reporting in case the account is deleted before WhatsApp reviews it.
Does a verified badge stop impersonation completely?
No, but it makes it significantly harder for a fake account to be convincing. The blue tick cannot be copied because it is assigned by Meta after verification, not added by the account holder.
What if the fake account is also linking to a fraudulent website?
The WhatsApp report alone will not remove the linked site. The fake domain or phishing page needs to be reported and taken down separately through the relevant host, registrar, or search engine. Brand protection services that handle this across channels are more effective than platform-by-platform reporting.
How does Remove.tech help with WhatsApp impersonation?
Remove.tech monitors messenger services, social platforms, search engines, and websites for unauthorised use of your brand. When a fake account or linked fraudulent asset is found, the platform handles structured takedown requests and evidence capture, so your team is not managing each case manually.
