Fake Vendor Addition WhatsApp Scam
INDIA — By BharatSecure Threat Intelligence Team ·
Verdict: Suspicious | Risk Score: 8/10 | Severity: high
How Fake Vendor Addition WhatsApp Scam Works
Overview: Fraudsters impersonate company executives on WhatsApp to instruct staff to add or approve new vendors for payments without the usual verification. Targeting finance and procurement teams, these scams often align with the company’s billing cycles or vendor onboarding times, aiming to blend in with actual business activity. Risk is amplified as most Indian firms handle vendor communication and payment approvals over WhatsApp, particularly in SMEs. How It Works: 1. Scammer gains access to or mimics the WhatsApp account of a CXO or finance head. 2. Sends employees instructions to quickly onboard a 'new' vendor and process advance payment. 3. Provides urgent context—like 'new project deadline' or 'client pressure'—and demands secrecy. 4. The employee processes the transaction, only to discover later that the vendor is fake and the money is irretrievable. India Angle: SMEs across Tier-2 and Tier-3 Indian cities, especially those with less formal payment processes, are regular targets. The scam is often executed in English and regional languages (Gujarati, Marathi, Tamil) to match company preference and maximize credibility. Real Examples: - WhatsApp: "We must add Radha Exports as vendor right now, Rs 2 lakh advance. Client is waiting." - WhatsApp: "Urgent—new supplier for project, send 1 lakh on UPI, will explain later." Red Flags: - Vendor addition requests skipping standard approval. - Sudden urgency, often after business hours. - Precise instructions to pay via UPI or to a new account. - Demands not to discuss with others in the team. Protective Measures: - All vendor additions/payments must go through official channels and double-checked approval. - Train finance staff to distrust urgent WhatsApp vendor setup requests. - Require multi-user signoff for any new vendor transfers. - Always validate new payment instructions independently. If Victimised: - Immediately halt further payments. - Alert your finance/control teams. - Call 1930 and file a report at cybercrime.gov.in. - Try to get your bank to freeze transaction. Related Scams: - Fake job offer letters demanding 'vendor onboarding fee.' - Phishing-based invoice fraud. - Executive impersonation via email.
How This Scam Works — Detailed Explanation
In the Fake Vendor Addition WhatsApp Scam, scammers typically initiate their schemes by gaining access to the contact lists of individuals working in finance or procurement departments. They often do this by using social engineering tactics, posing as trusted sources such as CISOs or other company executives. By infiltrating WhatsApp groups or utilizing phone number databases, fraudsters craft convincing messages to instigate their schemes. This scam is particularly effective in small and medium-sized enterprises (SMEs) where budgets are tight and processes may not be as stringent as in larger firms. As many Indian businesses utilize WhatsApp for professional communication, the opportunity for exploitation grows significantly as scammers impersonate authoritative figures in urgent settings, compelling employees to act without following proper verification protocols.
To psychologically manipulate victims, scammers utilize urgency as a primary tactic. Their messages often imply that immediate action is required—situations such as impending deadlines for payments associated with project launches or vendor onboarding timelines make the request seem legitimate. Scammers may send messages that read: 'We need to finalize payments by the end of the day to avoid penalties!' This creates a sense of panic in the victim, leading them to bypass standard verification checks. Fraudsters may also insist on confidentiality by instructing the target to not discuss the matter with others, which enhances the perception of legitimacy. Coercing employees into secrecy raises red flags, but in a pressured environment, individuals may overlook this suspicious behavior.
Once a victim falls for the scam, the process typically unfolds in a series of steps. The employee receives a WhatsApp message requesting the addition of a new vendor for payment, often accompanied by a payment link or a UPI ID. Upon compliance, the employee is directed to a fraudulent payment portal or is asked to share sensitive information like company banking details or internal authorizations. Unbeknownst to them, these payments are routed straight to the scammer’s account, leading to substantial financial loss. Reports indicate that in India, companies have lost crores due to similar scams. In 2022 alone, the Ministry of Home Affairs (MHA) reported that cyber frauds, including scams like this, amounted to ₹4,000 crore nationwide, emphasizing the significant issue corporations face today.
The effects of such scams extend beyond immediate financial losses; they can also damage business credibility and relationships with genuine vendors. For example, if a legit vendor is inadvertently paid late due to the chaos caused by a scam, this could result in lost contracts and damage to reputations. Recently, a company in Bengaluru reported a loss of ₹1 crore due to this specific scam, showcasing the need for vigilance and stringent communication protocols. Furthermore, this aligns with advisories from the Reserve Bank of India (RBI) and CERT-In, which encourage organizations to establish secure channels for payment verifications and to regularly educate employees about potential cyber threats.
To identify this scam amidst legitimate communications, vigilant employees should observe red flags such as requests for payments that skip internal checks, especially under pressure. Any WhatsApp payment request that deviates from standard practice should be regarded with suspicion. The timing of such requests can also be a giveaway; if messages arrive during odd hours, like late at night or over weekends—a time when normal business operations are paused—this is often a calculated tactic by scammers. Lastly, genuine company communications allow for cross-checking and affirmations; any insistence on maintaining secrecy is a strong indicator to question the legitimacy of the request.
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does Fake Vendor Addition WhatsApp Scam Target?
General public across India
Red Flags — How to Identify Fake Vendor Addition WhatsApp Scam
- WhatsApp payment request for new vendor skipping internal checks
- Payment urgency tied to business deadline or project
- Unusual request timing (night/weekend)
- Secrecy and no cross-check allowed
What To Do If You Encounter Fake Vendor Addition WhatsApp Scam
- Report the incident immediately via the cybercrime helpline at 1930 or visit cybercrime.gov.in.
- Notify your bank via their helpline (SBI: 1800-11-1109, HDFC: 1800-202-6161) about the fraud to block further payments.
- Inform your supervisor or the IT department about the incident for internal awareness and support.
- Check for system breaches; change passwords for your company accounts that may have been compromised.
- Review company protocols regarding vendor payments and reinforce training among staff on identifying scams.
- Keep records of the fraudulent communication for law enforcement and insurance purposes.
How to Report Fake Vendor Addition WhatsApp Scam in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What to do if I shared my UPI details in a WhatsApp scam?
- Immediately contact your bank's helpline (SBI: 1800-11-1109, HDFC: 1800-202-6161) and the cybercrime helpline at 1930. Change your UPI password and notify your contacts.
- How can I identify a Fake Vendor Addition WhatsApp Scam?
- Look for signs such as urgent requests for payments outside of normal operating hours, demands for secrecy, or bypassing usual vendor checks.
- How do I report this type of scam in India?
- Report the scam via the cybercrime helpline at 1930 and visit cybercrime.gov.in for further assistance. Inform your bank about any unauthorized transactions.
- What should I do to recover money or protect accounts after this scam?
- Contact your bank immediately to report the fraud and block your accounts if necessary. Gather all relevant details of the scam and file a police report if the amount involved is significant.
Related Scams in India
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.