WhatsApp adds new account security features against takeovers and scam calls

Meta rolled out new account security features for WhatsApp, centered on stronger two-step verification and providing users additional context for incoming calls from unknown numbers. The goal is to curb two persistent problems on the platform: account takeovers, where attackers hijack accounts to impersonate users and defraud their contacts, and scam calls from unfamiliar numbers that have proliferated across messaging apps.

The mechanism for unknown-caller context aims to give recipients signals about who might be calling before they answer — a defense against social-engineering scams that rely on the recipient not knowing the caller is fraudulent. Strengthened two-step verification adds friction to account-takeover attempts, which typically exploit SIM-swapping or intercepted verification codes.

While modest compared to frontier-model news, the update matters because of WhatsApp's enormous global scale, particularly in regions where it serves as primary communication and even financial infrastructure, making account takeovers high-impact for victims. Security-and-trust features on messaging platforms are a continuous arms race against increasingly sophisticated, and increasingly AI-assisted, fraud.

That AI-assisted context connects the update to the week's broader security theme: with LLM-generated phishing and voice/deepfake scams rising (and tools like the ToxNetV2 botnet demonstrating AI-assisted offense), platform-level defenses like caller context and stronger verification are part of the defensive response. Competitively, Meta is keeping WhatsApp's security features current against rivals like Signal and Telegram, where privacy and safety are differentiators. The practical question is adoption — two-step verification only helps users who enable it — and whether unknown-caller context meaningfully reduces scam success rates. Watch rollout scope and any abuse-reduction data Meta publishes.