In one case, an employee received a WhatsApp message appearing to be from the boss's number, asking for an urgent transfer of ₹2 crore to a specified account. The display picture and phone number matched, and even the client name appeared correct. The employee transferred the money.

The next day, the boss noticed a shortfall in the account and, on inquiry, discovered the message had not been sent by him. Shocked by the fake message, the company filed a police complaint.

Police said three such cases were registered recently in the Hyderabad commissionerate, with total losses of about ₹4 crore. Officials warned that if unchecked, this fraud could scale up like earlier digital scams.

Malware enables access to company WhatsApp groups

Linking WhatsApp to computers has become common in offices. Many organisations also use WhatsApp groups for internal communication. Cyber criminals exploit this practice.

They first send a phishing email to an employee. Once opened, malware enters the system and begins relaying activity to the attacker. If WhatsApp is linked to the computer, the attacker can monitor group conversations.

The criminals observe financial transactions and create bank accounts with names similar to those of targeted firms. They also steal the boss's photo and phone number. By studying how the accountant has saved the boss's contact, they send messages using the same name and display picture.

Posing as the boss in a meeting, they instruct immediate fund transfers, which employees often execute without verification.

Verify via phone call, says Sajjanar

Police advised employees to confirm such requests by calling the sender before transferring money. They urged organisations to keep antivirus software updated and avoid opening suspicious emails.

Officials also recommended logging out of WhatsApp Web after use and reporting any suspected fraud immediately.