[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnJToZFb3nbYKBLkyURSAid8kZwjRgM1pf7EdUmDxhJQ":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"status":21,"created_at":22,"published_at":23,"article":24,"tags":28,"podcasts":41},"4cf03a97-9a03-4085-b785-7d32d44151b0","whatsapp-and-signal-roll-out-features-to-combat-scams-and-interception","2c8ec3f3-d36d-40a4-9d13-e072901d40d2","WhatsApp and Signal Roll Out Features to Combat Scams and Interception","This article highlights the growing threat of social engineering and message interception targeting everyday users on popular messaging platforms. WhatsApp's new on-device machine learning scam detection addresses the reality that users frequently lack the ability to identify suspicious communications from unknown contacts. Signal's automatic key verification tackles the risk of man-in-the-middle attacks, where unauthorized parties could intercept encrypted communications without either party knowing. These developments underscore that even end-to-end encrypted platforms require additional safeguards because the human element remains the most exploitable vulnerability. Organizations and individuals who rely on these platforms for sensitive communication must stay informed about available security features and enable them proactively.","**Immediate actions:**\n- Enable WhatsApp's Scam Alert feature (once available) and educate users to act on its warnings by blocking or reporting suspicious contacts.\n- Verify Signal safety numbers manually or enable automatic key verification to detect unauthorized interception of communications.\n\n**User awareness measures:**\n- Train employees and end-users to recognize social engineering tactics such as unsolicited messages, urgent requests, and impersonation from unknown contacts.\n- Establish a clear reporting process so users can quickly escalate suspected scam messages to a security team or IT helpdesk.\n- Publish and regularly refresh guidance on secure messaging best practices, including never clicking links from unknown contacts.\n\n**Long-term improvements:**\n- Adopt a mobile device management (MDM) policy that enforces approved, up-to-date versions of messaging apps across the organization.\n- Evaluate and deploy enterprise-grade secure messaging solutions that offer centralized monitoring, key verification, and compliance logging.\n- Conduct periodic phishing and social engineering simulations that include messaging app scenarios to measure and improve user resilience.",[12,13,14,15,16,17,18,19,20],"CIS Control 14 – Security Awareness and Skills Training","CIS Control 4 – Secure Configuration of Enterprise Assets and Software","NIST SP 800-53 AT-2 – Literacy Training and Awareness","NIST SP 800-53 SC-8 – Transmission Confidentiality and Integrity","NIST SP 800-53 IA-3 – Device Identification and Authentication","GDPR Article 25 – Data Protection by Design and by Default","GDPR Article 32 – Security of Processing","NIST Cybersecurity Framework PR.AT-1 – All Users Informed and Trained","NIST Cybersecurity Framework PR.DS-2 – Data-in-Transit Protections","published","2026-08-12T14:20:38.590594+00:00","2026-08-12T14:20:38.29+00:00",{"id":7,"url":25,"slug":26,"title":27},"https:\u002F\u002Fwww.securityweek.com\u002Fwhatsapp-unveils-new-scam-alert-feature\u002F","whatsapp-unveils-new-scam-alert-feature-57a364","WhatsApp Unveils New Scam Alert Feature",[29,35],{"id":30,"name":31,"slug":32,"description":33,"color":34},"7261eb8f-acd4-4d93-a489-7fdd652ec0ea","Security Awareness","security-awareness","Phishing, social engineering, human error","#22c55e",{"id":36,"name":37,"slug":38,"description":39,"color":40},"c8b843a5-d5a7-41d1-8d3b-cabded09d2ef","Data Protection","data-protection","Unencrypted data, missing DLP, poor classification","#3b82f6",[]]