Phishing domains impersonating WhatsApp. Stay alert: WhatsApp never asks for your DigiD, PIN or login credentials via SMS or email.
Scammers register domains that look like whatsapp.com (with extra words, hyphens or a different extension) and build a fake login page. Victims typically receive an SMS, email or WhatsApp message linking to such a fake domain.
Check for unusual domain spellings, requests for personal data or PIN codes, and unusual payment or login requests. Real WhatsApp never asks for your credentials or PIN via SMS or email.
Official organisations like WhatsApp work with hosting providers and the Dutch Fraudehelpdesk to take phishing domains offline. Reporting a domain to Fraudehelpdesk speeds up the process.
We currently have 60 active dossiers in this category. The list updates hourly via URLhaus, OpenPhish and user reports.
FFCheck combines real-time threat feeds (URLhaus, Spamhaus DBL, Google Safe Browsing) with technical analysis of each domain and anonymous user reports.
Yes. Paste the domain into the search bar at the top. We generate a safety dossier instantly and you can share your experience anonymously below.
Paste a suspicious website, phone number or email address and get an instant safety dossier — free, anonymous, no account.
Open the scam-checker →