Fake WhatsApp business accounts: how scammers copy your brand and what to do about it

Harish Nair runs a kitchen-appliance showroom and service centre in Kochi with 32 staff. In September a customer walked in angry. She had searched for “Nair Appliances service” on her phone, found a number in a forum post, and messaged it on WhatsApp. The profile had Harish’s logo. A “technician” asked for a ₹10 booking fee through a link and then for the OTP her bank sent. She lost more than the ₹10. (Harish and his business are invented; the pattern is not.)

A fake WhatsApp business account like that one costs the scammer a SIM card and five minutes. Below: how these scams run, what Meta gives a business against them, what to publish so customers can check, and where to report a fake, to WhatsApp and to the Indian authorities.

One thing to accept first: no badge, subscription or form stops a fraudster opening a new WhatsApp account with your name and logo tomorrow. Your badge shows only on your own number. The work is making the real number easy to find and the fake ones easy to doubt.

How do scammers impersonate a business on WhatsApp?

They borrow your name, your logo as the profile photo, and the trust customers already give you, then ask for money or details. WhatsApp’s own help page on scams names this directly: scammers “could also pretend to be a celebrity or a well-known business or company”. It lists fake job offers too, where “someone could pretend to be a recruiter at a well-known company to trick you into sharing personal information, or ask for money as part of a job application”.

For a business, three versions matter most:

• Fake support numbers. A number planted in a forum, a review reply or a paid search result, answered by someone posing as your service desk. The ask is a small “visit charge” through a link, a screen-sharing app, or the OTP that arrives “to confirm the booking”.
• Fake job offers. “Work from home for [your brand], ₹3,000 a day for liking videos.” The ask is a joining fee, or bank details “for salary”.
• Fake delivery or KYC messages. “Your order from [your brand] is on hold, update your address” or “complete KYC to receive your refund”, with a link to a page that collects card details.

WhatsApp’s list of warning signs fits all three: a message that asks you to tap a link or download an app, asks for card or bank numbers, birth date or passwords, asks for money, pretends to be someone you know, or is about a job, a loan or an investment. Its India safety page adds a plain warning about “windfall gain, job offer, quick money scheme” messages: block and report “without interacting further”.

How can a customer verify a WhatsApp business account?

By checking the number against a source the scammer doesn’t control: your website, your Google Business Profile, your invoice. A badge is a second check, not the first.

What the badges mean, according to Meta’s own pages:

What the customer sees	What it means	What it doesn’t mean
Blue checkmark on a Platform number	An Official Business Account: Meta’s page lists business verification, 30 days on the Platform, two-step verification and an approved display name among the conditions	That every genuine business has one. Most small ones don’t
Verified badge on a Business app number	Meta “has verified the account based on their activity across Meta technologies, or information or documents they provide”, usually through Meta Verified or Meta One	That the subscription guarantees a badge. WhatsApp’s page says subscribing “doesn’t guarantee a verified badge"
"Official” or “Verified” in the business name	Nothing. Meta’s display name guidelines for Platform numbers forbid both words, because they “can mislead customers into thinking that the business has endorsed status”	Any kind of endorsement

Two more clues help. When a number the customer hasn’t saved messages them first, WhatsApp shows which country the number is registered in and whether they have groups in common. A Kochi showroom writing from a foreign-registered number is a reason to stop. And Meta’s page says a Platform number without Official Business Account status “will not appear in search results” inside WhatsApp unless the person saved it, so a “search for us on WhatsApp” instruction only works for badged numbers.

Our badge guide covers the three routes to a tick, and the display name rules explain why the name at the top of your chats should match your signboard.

What does Meta give a business against impersonation?

A policy, a few paid protections, a trademark form and the user report button. No form we found on Meta’s or WhatsApp’s pages lets a business report “this number is pretending to be us” and have it handled as a brand complaint.

The pieces, as of 18 October 2026:

The policy. WhatsApp’s Business Messaging Policy, last updated 23 September 2026, says a business “may not use WhatsApp for Business to impersonate another business or entity, misrepresent your affiliation with a business or entity or otherwise mislead customers”. A fake account breaks it. That gives your report something to point at, nothing more.

Meta Verified and Meta One. WhatsApp’s help page lists “impersonation protection” in every Meta Verified business plan, from Business Standard upwards. It doesn’t explain what the protection does. Business Premium adds 10 “Protected business accounts” and Business Max 50, which the help page describes as a way to identify your other genuine WhatsApp accounts so they aren’t “falsely banned for impersonation”. Useful for a chain with a number per branch. Both are subscriptions for Business app numbers; WhatsApp’s page says availability depends on Meta’s view of your business activity and shows no Indian prices.

The trademark form. WhatsApp’s intellectual property policy says: “If you believe content on WhatsApp violates your trademark work, you can report it by filling out this contact form.” For a profile using your registered logo or brand name, this is the brand-protection route. It needs a trademark to point to, and the page suggests messaging the user first, which with a scammer is pointless.

The report button. Every customer can report a business from inside the chat, and WhatsApp says block and report information may be used “to take action on an account or limit the messages they can send”. The more of your customers who report a fake, the more signal WhatsApp has.

Business verification of your own portfolio doesn’t protect you from fakes directly, but it is one of the conditions for the badge. Our verification guide covers the documents.

What should a business publish?

One official WhatsApp number, the same everywhere, and a short notice of what you will never ask for.

Put the number on your website’s contact page and footer, your Google Business Profile, invoices, packaging, the standee at the counter and your email signature. If two numbers exist (sales and service), publish both, labelled. Never publish a staff member’s personal number: customers used to hearing from a salesperson’s phone won’t find one more unknown number odd. Our piece on customers in staff phones covers the move to one business number, and the trade-off, since some customers keep messaging the old phones for months. Our Google Business Profile guide shows how to add a click-to-chat link to the listing, which is the place most customers look when they want a service number.

Then fill in the WhatsApp business profile on that number: the website field, the address, the hours. A customer who taps your name and sees your real website can cross-check in one step.

Next to the number on your website, put the notice. Harish’s reads:

Our only WhatsApp number is the one on this page.
We will never ask you for:
- an OTP, UPI PIN or card number
- payment to a personal UPI ID
- a "registration" or "visit booking" fee by link
- installing a screen-sharing app
If someone does, it isn't us. Report the number on WhatsApp and call us.

Keep it specific to how your business actually takes money. If you do take a visit charge, say exactly how (“paid to the technician at your door, with a printed receipt”) so any other route stands out.

What should you tell customers, and what does it cost?

Put the warning inside messages you already send. A line at the end of the order or booking confirmation costs nothing extra, because you were sending that message anyway.

A booking confirmation template with the line built in:

Hi {{1}}, your service visit for {{2}} is booked for {{3}}.
Our technician will call from this number only. We never ask for OTPs or payment to a personal UPI ID.

That’s a utility template, ₹0.115 per delivered message to an Indian number, before GST, on Meta’s rate card effective 1 October 2026. If you add the line to an existing approved template, the edit goes through review again, and Meta’s review can take up to 24 hours.

A separate “beware of fake numbers” message to your whole list is different. Meta decides the category from the content, and a general notice to everyone, not tied to a customer’s order, is unlikely to meet the utility test. Budget it as marketing at ₹0.8631 per delivered message, and send it only to people who opted in. For Harish’s 9,000 opted-in customers that is about ₹7,768 before GST, worth it once after a wave of fakes, not every month.

Inside an open chat it’s simpler. When a customer asks “is this number really you?”, the answer is a typed reply, and since 1 October 2026 replies are charged at ₹0.115 after the first 1,000 per number per month.

How to report a fake WhatsApp business account

Do all four that apply. They go to different places and none of them replaces the others.

1. Inside WhatsApp. Open the chat with the fake account, tap the menu or the business name, tap Report, and tick Block to block it as well. WhatsApp says a report sends it “up to five of the last messages” from that account, and that “the only way to report someone is to follow the in-app reporting process”. Ask every customer who received a message to do the same. Before blocking, take screenshots; WhatsApp’s own page suggests keeping a record.
2. To Chakshu on Sanchar Saathi. The Department of Telecommunications’ portal takes reports of “suspected fraud communications” by call, text message or WhatsApp, including “impersonation”. It asks for reports within 30 days for action. This is the route for the number itself, before anyone has lost money.
3. If money was lost, to 1930 or cybercrime.gov.in. Chakshu’s page says “If you have already lost money, please report at cyber crime helpline 1930 or cybercrime.gov.in”, and the Ministry of Home Affairs’ National Cyber Crime Reporting Portal says “Any victim of financial cyber fraud can dial helpline number 1930.” The customer who lost the money should call; speed matters with bank transfers.
4. To WhatsApp’s trademark form, if you hold a registered trademark and the profile uses it. Link it from WhatsApp’s intellectual property policy page.

For users who can’t get a complaint handled through these routes, WhatsApp’s India safety page names a Grievance Officer based in India, with a contact link on that page.

Write down who takes the report from the customer, who files Chakshu, and who calls the customer back. Harish’s front desk keeps a printed copy by the billing counter.

Terms like Official Business Account, display name and business portfolio are in our glossary.

The order to do it in

This week, put the official number and the notice on your contact page and Google listing, and add the line to your confirmation template. Then give the four-step reporting routine to whoever answers the phone, so the next “your technician asked for my OTP” call ends with a report filed.