04.11.2026 17:24
The Presidential Cybersecurity Directorate announced that complaints have increased regarding WhatsApp accounts being seized and money being requested via IBAN from people’s close circles. Technical investigations determined that malicious software targeting vulnerabilities in iPhones with outdated iOS versions can be used in these attacks. The Directorate recommended updating devices, enabling two-step verification, and confirming money requests by phone.
The Presidential Cybersecurity Directorate issued a cybersecurity warning regarding fraud attempts carried out through WhatsApp and similar messaging applications.
The Presidential Cybersecurity Directorate announced that an increase has recently been observed in complaints that accounts on WhatsApp and similar messaging applications are being compromised through means other than account credentials and used in fraud activities. In these attempts, the Cybersecurity Directorate observed that the identities of account holders were used to request money transfers via IBAN information from people in their close circles.
OUTDATED PHONES ARE TARGETED
In technical investigations conducted by the Directorate, it was determined that malicious software targeting security vulnerabilities, especially in iPhone devices with outdated iOS operating systems, can be used in such attacks.
These malicious software can infect devices through malicious advertisements on the internet, suspicious links, and compromised websites. In some advanced attacks, even merely viewing malicious content can jeopardize device security.
Attackers who gain unauthorized access to devices through these methods can access personal information and messaging accounts and carry out transactions without the users' knowledge. Using the identities of account holders, they can request money transfers from people in their contact lists under the pretext of an urgent need.
MEASURES TO BE TAKEN BY THE DIRECTORATE
In order to protect citizens' digital security, the Presidential Cybersecurity Directorate reported that the following are important: operating system and application updates—all citizens, especially iPhone users, keeping their devices' operating systems and messaging applications up to date; installing the latest security updates offered in the Settings > General > Software Update section on iPhone devices; avoiding suspicious links and advertisements: not clicking links of unknown origin or uncertain reliability, including social media advertisements, not downloading applications or files from untrustworthy websites, and not performing any transaction if suspicious links are opened; strengthening account security: enabling two-step verification on WhatsApp and other digital accounts, not sharing verification codes with third parties, regularly checking the Linked Devices section in the WhatsApp application and ending unrecognized sessions, while considering that in some advanced attacks unauthorized access may not be displayed in this section; verifying financial requests: verifying IBAN information and money transfer requests, including messages from acquaintances, through a different communication channel, preferably by calling the person concerned, is important for reducing cybersecurity risks.
WHAT SHOULD THOSE WHOSE ACCOUNTS ARE COMPROMISED DO?
It is important for citizens who suspect their accounts have been compromised to inform their close circles through different communication channels and to preserve digital evidence, including suspicious messages and IBAN information, and apply to law enforcement units or Chief Public Prosecutors' Offices.
If a money transfer has been made, it is recommended to contact the relevant bank without delay; to restore device security, reset the phone and install the current operating system version; change all account passwords, especially banking, social media, and email accounts, from a secure device; and enable multi-factor authentication on all possible accounts.
It is of great importance that citizens consider that messages from real messaging accounts belonging to people they know may also have been sent without the account holder's knowledge.
The Presidential Cybersecurity Directorate continues its monitoring, analysis, and information activities regarding cyber threats in order to ensure citizens' security in digital environments.