UK regulators investigate record surge in automated WhatsApp scam calls

Record complaints trigger ICO investigation

The UK’s Information Commissioner's Office (ICO) is investigating a sharp increase in complaints about automated calls that urge recipients to add contacts on WhatsApp. According to BBC News, over 3,600 complaints were recorded in September, the highest number in five years and nearly three times the total from July.

The ICO suspects that millions of people across the UK have received these calls, which are largely indiscriminate. The calls appear to originate from UK mobile numbers, but authorities believe the numbers are spoofed and the calls are likely generated from abroad.

Suspected links to recruitment scams and phishing

The automated calls typically instruct recipients to add a contact on WhatsApp, often under the pretext of part-time job offers or other opportunities. Some recorded messages explicitly mention work-from-home positions, raising concerns about recruitment scams or phishing schemes.

Andy Curry, Head of Criminal Investigations at the ICO, told BBC News that the calls are likely part of a broader fraud strategy. He suggested that the scams could involve fake job listings, money muling (where victims unknowingly launder criminal funds), or phishing exercises to identify active phone numbers for future attacks.

Industry and regulators collaborate to trace scam origins

Mobile network operators, regulators, and law enforcement agencies are collaborating to address the surge in automated calls. The Communications Crime Strategy Group, which includes representatives from the ICO, Ofcom, and the Home Office, is coordinating efforts to trace the source of the calls and disrupt their operations.

Efforts include sharing intelligence reports with Ofcom and working closely with Meta, the parent company of WhatsApp, to address follow-ups on the platform. However, due to WhatsApp’s end-to-end encryption, authorities cannot monitor or investigate conversations once they move to the app.

Meta has stated that WhatsApp bans millions of accounts each year for "malicious behaviours," such as bulk account registration or automated messaging.

Challenges in combating spoofed calls

The UK government previously pledged to eliminate call spoofing within a year, but the recent surge in complaints suggests challenges persist. Spoofed numbers mimic legitimate UK mobile numbers, making it difficult for recipients to identify scams.

WhatsApp offers features to protect users, including the ability to silence calls from unknown numbers and report suspicious accounts.

What this means

Lazyfounder analysis — our interpretation, not reported fact.

This surge in automated scam calls highlights the growing sophistication of fraudsters in exploiting telecom networks and messaging platforms like WhatsApp. For founders and operators, it underscores the importance of robust fraud detection systems and consumer education—especially in sectors vulnerable to phishing or recruitment scams. The fact that these calls are indiscriminate and spoofed also signals a broader challenge for regulators and telecom providers: balancing innovation with safeguards against abuse. Startups in fintech, cybersecurity, or communication tools should take note of how quickly such threats can escalate and prioritize proactive measures to protect users.

Key takeaways

• Founders in fintech, cybersecurity, and telecoms should assess vulnerabilities in their systems to prevent exploitation by automated scams.
• Consumer trust is fragile; businesses relying on digital communication must invest in fraud detection and user education to mitigate risks.
• Regulatory scrutiny of automated calls and spoofing is intensifying, so compliance with data protection and telecom regulations should be a priority.
• Collaboration between platforms (like WhatsApp), regulators, and telecom providers is critical to combating large-scale fraud—startups should consider partnerships or integrations that enhance security.

FAQ

What should I do if I receive one of these automated calls?

If you receive an automated call urging you to add a contact on WhatsApp, do not engage with it. Hang up immediately and report the number to your mobile carrier or the ICO. WhatsApp also allows users to silence calls from unknown numbers and report suspicious accounts.

Why are these calls difficult to trace?

The calls appear to come from UK mobile numbers, but these numbers are likely spoofed—meaning they are imitated by criminals, often operating from abroad. Additionally, once the conversation moves to WhatsApp, end-to-end encryption prevents authorities from monitoring the content.

How can businesses protect their customers from such scams?

Businesses can implement fraud detection systems to identify and block suspicious activity, educate customers about common scam tactics, and collaborate with telecom providers and platforms like WhatsApp to share intelligence about emerging threats.

Related on Lazyfounder

• Ofcom
• Meta
• More policy news
• Ofcom investigates Meta over Instagram ‘Instants’ feature for risk assessment failures