WhatsApp is warning users about something far more serious than a scam: a fake version of the app that was actually spyware. According to recent coverage by Italian newspaper La Repubblica and news agency ANSA, hundreds of users were tricked into downloading a malicious clone of WhatsApp, which was secretly designed to spy on them.
This wasn’t a random attack either. In a conversation with TechCrunch, Meta says the campaign was highly targeted, with victims lured into installing the fake app through deceptive methods. Once installed, the spyware could potentially access sensitive data and monitor activity.
A convincing fake, and a swift crackdown
The campaign has been linked to an Italian surveillance company, reportedly working in the spyware space. Meta claims the fake app was designed to impersonate WhatsApp convincingly, making it difficult for users to tell the difference. And because it looked and behaved like the real thing, victims unknowingly granted it the permissions needed to operate.
The good news is that Meta has already started taking action. The company has notified affected users and is actively logging them out of the fake app, effectively cutting off the spyware’s access. WhatsApp says around 200 users, mainly in Italy, were affected and have been alerted about the risks, with guidance to remove the fake app and install the official version.
The company also noted it’s prioritizing user safety and isn’t sharing further details about the victims at this stage. It’s also part of a broader effort by WhatsApp to crack down on spyware campaigns, something the platform has dealt with multiple times in recent years.
What should users do?
The usual advice matters more than ever. Stick to official app stores, verify the developer before installing anything, and avoid downloading apps from random links or messages. Because as this case shows, even something as familiar as WhatsApp can be convincingly faked.