Human In[Security] – Week of 2026-08-10

Today’s Menu (30-second skim)

• Scammers are using fake voting messages to take over WhatsApp accounts: A fake message asking you to vote for someone’s child or pet can let a scammer hijack your WhatsApp account.
• FTC warns about the scam after the scam: People who already lost money to one scam are now being targeted again by fake “recovery” helpers.
• Avoid the ATM Distraction Scam: A major hacking case shows how one weak login can expose data from huge companies and put regular people at risk.

1) Scammers are using fake voting messages to take over WhatsApp accounts

What happened (plain English): Researchers found a WhatsApp scam that starts with a message asking you to vote for a friend’s child, pet, or school contest entry. The message looks friendly and harmless, which is exactly why it works so well. But the link does not take you to a real voting page. Instead, it tricks you into linking the scammer’s device to your WhatsApp account. Once that happens, the scammer can read your messages, send messages as you, and keep spreading the scam from an account your family and friends already trust.

Why it matters to you: A message from a real friend feels safe, so many people click before stopping to think. If a scammer takes over your account, they can pretend to be you and ask your contacts for money, gift cards, or verification codes. They could also read private chats and use details from them to sound even more believable. One realistic scenario is a relative getting a message that says you are stranded and need cash fast. Another is a scammer using your account to ask someone for a login code, then stealing that person’s account too.

How to protect yourself (do this):

• Do not scan a QR code or enter a linking code unless you started the setup yourself.
• In WhatsApp, check Settings > Linked Devices and remove anything you do not recognize.
• If a friend sends a strange voting request, verify it another way before tapping the link.

Published: 2026-08-04

Source: Infosecurity Magazine

2) FTC warns about the scam after the scam

What happened (plain English): The FTC is warning people about a cruel follow-up trick: scammers who target people after they have already been scammed once. These fake helpers may say they work for the government, a law firm, or a consumer protection group. They promise they can recover lost money, trace stolen crypto, or speed up a refund. Then they ask for an upfront fee or for sensitive information like bank details, account logins, or personal data. In other words, they are not rescuers at all – they are just running a second scam on someone who is already stressed and vulnerable.

Why it matters to you: When someone has just lost money, they are often upset and eager for any good news. That emotional moment makes it easier for a scammer to sound helpful and official. One common abuse scenario is paying a so-called recovery expert who disappears as soon as the fee is sent. Another is sharing bank or identity information with a fake helper, which can lead to new theft, drained accounts, or identity fraud. A person can end up being hurt twice: first by the original scam, then by the person claiming they can fix it.

How to protect yourself (do this):

• Do not pay upfront to anyone who promises to recover money from a scam.
• Be suspicious if someone contacts you out of the blue claiming they can trace crypto, unlock a refund, or speed up a case.
• If you were scammed, report it through official channels yourself instead of trusting a stranger who found you first.

Published: 2026-08-03

Source: FTC Consumer Advice

3) Avoid the ATM Distraction Scam

What happened (plain English): An ATM distraction scam is a simple trick that works when someone interrupts you at the exact moment you are entering a PIN or handling cash. A stranger may bump into you, start a conversation, or ask for help so you stop paying attention. Meanwhile, a second person can watch the keypad, grab your card, or take advantage of the moment you step away. The scam is old, but it still works because it preys on pressure, politeness, and divided attention.

Why it matters to you: These scams do not need high-tech tools to cause damage. They can lead to stolen cash, a compromised debit card, or a PIN that gets copied and reused. One common situation is someone acting confused near the machine so you lower your guard. Another is a “helper” who gets too close while you are trying to finish quickly. If a criminal gets your card or PIN, they can move fast before you realize what happened.

How to protect yourself (do this):

• Keep one hand over the keypad while entering your PIN.
• If anyone crowds you or distracts you, cancel the transaction and leave.
• Use ATMs inside banks or in bright, busy places when possible.
• If the machine looks tampered with, do not use it.

Published: 2026-08-10

Source: Consumer safety advice and common scam guidance

Grandma’s Firewall

This week’s simple rule:

A surprise message is not proof, and a surprise rescue offer is not help. Slow down before you click, reply, or pay.

Two scripts you can steal:

• “I’m going to check this another way before I touch that link.”
• “If you can really help me, I’ll contact the company or agency myself from its official website.”