# WhatsApp family impersonation scams targeting UK users in 2026 > Fraudsters are using public Facebook profiles to impersonate family members and friends on WhatsApp, drawing victims into financial scams. How to spot it and report it. **Published:** 2026-05-29 **Category:** SCAMS_MOBILE **Author:** Rafael Tuñón **Canonical URL:** https://rechargevodafone.co.uk/whatsapp-family-impersonation-scam-uk/ ## Key takeaways - Scammers harvest personal details, photos, and life events from public Facebook profiles to impersonate real family members or friends on WhatsApp. - Victims are often contacted first via Facebook Messenger, then moved to WhatsApp where the conversation is harder to trace. - The fraud does not always involve an immediate request for money; some scammers build trust for weeks or months before the financial ask arrives. - Action Fraud (0300 123 2040) is the UK's official reporting channel; suspicious WhatsApp messages can also be forwarded to 7726. - You can report impersonation of a real person directly to WhatsApp and to Facebook via their in-app reporting tools, and request the account be taken down. ## Key statistics - **£1.2bn+**, lost to fraud in the UK in 2023, with social media and messaging apps cited as a key enabler (Source: UK Finance Annual Fraud Report 2024 (figures pending independent verification)) - **7726**, short code to forward suspicious texts or WhatsApp messages to in the UK (Source: Ofcom) ## Article ## What is happening right now Reports shared on online scam-awareness communities in late May 2026 show a clear pattern: fraudsters are lifting personal details, photographs, and family news from public Facebook profiles and using that information to impersonate real people on WhatsApp. The goal varies. In some cases the scammer builds a fake romantic or friendly relationship over months before pushing the victim towards cryptocurrency investments or "gold futures trading." In others, no money is requested at all, at least not straight away, and the scammer appears to be gathering further intelligence or testing new victims. [Action Fraud](https://www.actionfraud.police.uk/), the UK's national fraud reporting centre run by the City of London Police, urges anyone who suspects impersonation fraud to report it immediately rather than wait for a financial loss to occur. Impersonation is itself the first stage of the crime. ## How scammers build a convincing false identity The starting point is almost always a public social media profile. A Facebook account with an open privacy setting can expose a person's full name, profile photos, cover photos, listed family members, hometown, recent life events (bereavements, house moves, new jobs), and a circle of friends whose details are equally visible. Scammers extract this information and construct a convincing WhatsApp persona. They upload the real person's photo as their profile picture, use the correct name, and open conversations with friends or relatives of the target by referencing real, verifiable details: a recent family bereavement, a shared memory, or a mutual connection. Because the details check out, the recipient has little reason to be suspicious at first contact. The second step is typically to move the conversation from Facebook Messenger to WhatsApp. Messenger messages can be reviewed and flagged by Meta's moderation systems; WhatsApp conversations are end-to-end encrypted and therefore harder for platforms to monitor proactively. ## The slow-burn investment fraud pattern One case discussed publicly in the r/Scams community illustrates how patient these scammers can be. A man had been in contact with a supposed woman for several months via WhatsApp, having initially connected on Facebook. During that time he shared significant personal information, exchanged photos and videos, and had voice and video calls. Only when a family member reviewed his messages did the scale of the manipulation become clear: he had downloaded a cryptocurrency application and set up a wallet, and had been considering investing several thousand pounds in a "gold futures trading" website. This model is consistent with what [the NCSC describes as "pig butchering" fraud](https://www.ncsc.gov.uk/guidance/whatsapp-scams): the scammer "fattens" the victim with trust and emotional investment before pushing them into a fraudulent financial product. The victim often resists intervention from family because they believe the relationship is genuine and do not want it to end. ## Impersonation without a financial motive (yet) A separate pattern involves no obvious financial request at all. In one reported case, a scammer created a WhatsApp account using a US-registered number and used details from a real person's public Facebook page, including photos and knowledge of a recent family bereavement, to contact that person's friends. One friend gave out her own phone number, believing she was speaking to someone she knew. The real person only found out when the friend raised it. This type of contact may be a precursor to a later financial approach, a method of harvesting further phone numbers and personal data, or an attempt to establish credibility before a wider operation. Regardless of the motive, it constitutes impersonation and should be reported. ## Why victims resist accepting the truth Financial fraud specialists and anti-scam advisers consistently note that victims of long-running impersonation or romance-style fraud find it extremely difficult to accept they have been deceived. Months of conversation, emotional connection, and shared confidences create a genuine sense of relationship. When a family member intervenes and tries to block the scammer or remove the app, the victim may react with anger, insisting they "know it is a scam" and are "just playing along." This denial is a recognised feature of the fraud, not a character flaw. [Citizens Advice](https://www.citizensadvice.org.uk/) recommends approaching the conversation without blame, focusing on the safety issue rather than the victim's judgement. If there are concerns about a vulnerable adult, local authority adult social care services can be contacted for safeguarding advice. ## How to report a WhatsApp impersonation scam in the UK If you or someone you know has been targeted, take these steps: 1. **Do not send any money.** If no money has been transferred yet, the financial loss can still be prevented. 2. **Report to Action Fraud** online at [actionfraud.police.uk](https://www.actionfraud.police.uk/) or by calling **0300 123 2040**. This is the official UK reporting route and creates a formal record that police can use. 3. **Forward suspicious messages** to **7726** (spells SPAM on a keypad). This is the UK short code operated by [Ofcom](https://www.ofcom.org.uk/phones-and-broadband/scam-calls-and-texts) for reporting scam texts and, on many networks, WhatsApp messages. 4. **Report within WhatsApp.** Open the chat, tap the contact name at the top, scroll down and select "Report." WhatsApp will review the account and can suspend it. 5. **Report to Facebook** if the initial contact was made via Messenger. Use the "Find support or report" option on the profile. Meta can remove accounts that impersonate real individuals. 6. **Alert the real person** being impersonated so they can warn their own contacts and lock down their Facebook privacy settings. 7. **If a crypto wallet or investment app was involved**, contact your bank immediately. UK banks are required under the Contingent Reimbursement Model and, from 2024, under mandatory reimbursement rules administered by the [Payment Systems Regulator](https://www.psr.org.uk/our-work/app-scams/) to assess claims for authorised push payment fraud. ## How to reduce the risk before it starts The most direct preventive measure is to review Facebook privacy settings. Setting the profile photo, posts, friends list, and personal details to "Friends only" or "Only me" removes the raw material scammers rely on. The [NCSC's guidance on social media privacy](https://www.ncsc.gov.uk/guidance/social-media-how-to-use-it-safely) covers this in detail for UK users. For families with elderly or less digitally confident relatives, a brief conversation about the "call them back on a known number" rule is valuable: if anyone contacts you via a new number claiming to be someone you know, verify it by calling the person's existing saved number before engaging further. This single step disrupts the impersonation model entirely. WhatsApp also offers two-step verification (Settings, Account, Two-step verification) which prevents a scammer from taking over your actual account even if they obtain your SIM or verification code. ## Related reading For a broader overview of mobile fraud affecting UK consumers, visit the [Mobile scams hub](/category/scams-mobile/) on this site. You may also find useful background in our article on [SIM-swap fraud and how UK networks respond to it](/sim-swap-fraud-uk/). ## Frequently asked questions ### How do I know if a WhatsApp message is really from a family member? Call the person back on a number you already have saved, or use a different channel such as a landline. Do not rely on the number that messaged you. Scammers can replicate names and profile photos easily. ### What should I do if someone is impersonating my relative on WhatsApp? Report the number to WhatsApp using the in-app report function. Then contact Action Fraud on 0300 123 2040 or at actionfraud.police.uk. Alert the real person so they can warn their contacts. ### Can WhatsApp take down an impersonation account? Yes. WhatsApp allows users to report accounts directly in the app. Select the chat, tap the contact name, scroll down and choose 'Report'. Meta also accepts reports via Facebook if the scammer was found there first. ### Is it a crime to impersonate someone on WhatsApp in the UK? Impersonation for the purpose of financial gain can constitute fraud under the Fraud Act 2006. The Communications Act 2003 also covers malicious or false communications. Police can investigate via Action Fraud. ### My relative is convinced the person is real. What can I do? Contact Action Fraud and consider reaching out to Citizens Advice (0800 223 1133) for guidance. The National Cyber Security Centre also publishes advice for families at ncsc.gov.uk. In extreme cases, a GP or social services may be able to assist if there are safeguarding concerns. ## Sources 1. [Action Fraud: National Fraud and Cyber Crime Reporting Centre](https://www.actionfraud.police.uk/) (Action Fraud) 2. [Scam calls and texts: what to do](https://www.ofcom.org.uk/phones-and-broadband/scam-calls-and-texts) (Ofcom) 3. [WhatsApp scams: how to protect yourself](https://www.ncsc.gov.uk/guidance/whatsapp-scams) (NCSC) 4. [Dad being WhatsApp scammed](https://www.reddit.com/r/Scams/comments/1tori5x/dad_being_whatsapp_scammed/) (r/Scams) 5. [Someone pretending to be my mom is messaging people close to us](https://www.reddit.com/r/Scams/comments/1tos8ju/someone_pretending_to_be_my_mom_is_messaging/) (r/Scams)