Fake WhatsApp Customer Care: How Scammers Impersonate GTBank, Zenith, Access Bank and UBA to Steal Your Money

Fake WhatsApp Customer Care: How the Scam Works and Why It Keeps Succeeding

Last Updated: May 29, 2026

Fake WhatsApp customer care scams have become one of the most damaging financial crimes targeting everyday Nigerians in 2025 and 2026. The scheme is straightforward and devastatingly effective: a fraudster monitors social media for anyone complaining about a bank transaction, then contacts that person pretending to be from the bank’s support team. Within minutes, the victim hands over an OTP, shares their screen, or clicks a phishing link — and their account is drained. This guide explains exactly how these impersonation scams operate, documents real cases involving GTBank, Zenith Bank, Access Bank, and UBA, and gives you the specific actions that keep you safe.

How Scammers Set Up Fake WhatsApp Customer Care Operations

Fake WhatsApp customer care fraud is defined as any scheme where a fraudster impersonates a bank’s support team on WhatsApp, social media, or messaging platforms to extract account credentials, OTPs, BVN details, or card numbers from victims. These operations are not random. They are structured, monitored businesses that harvest victims from specific digital spaces.

The Three Entry Points Scammers Use to Find Victims

The first and most common entry point is social media monitoring. Scammers continuously scan X (formerly Twitter), Facebook, and Instagram for posts that contain phrases like “debit alert,” “failed transaction,” “GTBank complaint,” or any bank’s official handle. The moment you post publicly about a banking problem, a fake customer care account replies before the real bank even sees your message. The reply directs you to send a WhatsApp number for “faster resolution.” In 2025, a student named Haneefah Jumoke lost N1.5 million to a fake Zenith Bank agent within hours of posting a complaint about a failed transaction on X. In the same year, a GTBank customer named Damilola Odunukan lost N30,000 through an identical chain of events. Furthermore, in May 2026, a Lagos resident lost N52,000 to someone operating a fake WhatsApp number whose Truecaller profile displayed the name “First Bank Quick Response” — a deliberately misleading identity designed to pass casual inspection. The second entry point involves fake accounts publishing loan offers. In March 2026, Africa Check confirmed the existence of multiple Facebook accounts using GTBank’s name and logo, all created in 2025 or 2026, all directing users to Facebook Messenger with promises of instant loans up to N5,000,000. These accounts had fewer than 300 combined followers and bore no Meta verification badge — clear signals that most victims missed. The third entry point involves outbound calls. A scammer calls you directly, claims your account has been flagged for suspicious activity, creates urgency, and then requests your OTP to “verify your identity” or asks you to install a remote access app like AnyDesk to “fix” the issue.

The Specific Tactics Used in Fake WhatsApp Customer Care Scams

Understanding the actual mechanics of each attack type is the fastest way to recognise and stop one in real time. Four distinct tactics dominate Nigerian bank impersonation fraud.

Tactic One: The OTP Extraction Script

This is the most widespread tactic. A scammer contacts you on WhatsApp claiming to be from your bank’s fraud team. They explain that your account has triggered an unusual activity alert and that they need to verify your identity before the account is locked. Specifically, they say a one-time password will be sent to your registered phone number and that you must read it back to them to complete verification. The OTP they trigger is actually an authorisation code for a transaction or a login attempt they initiated. Once you share it, the transfer executes immediately. No legitimate Nigerian bank — not GTBank, Zenith, Access Bank, or UBA — will ever ask you to read an OTP over a phone call, WhatsApp chat, or any other channel. An OTP is a single-use security code meant only for your eyes. The moment someone asks you for it, you know the call is fraudulent.

Tactic Two: The Phishing Form

Investigative journalists at FIJ documented this tactic in detail after undercover testing. A fake GTBank customer care account on X directed their reporter to a WhatsApp number. The operator, using an automated reply under the name “Joy,” requested the reporter’s account number, registered email address, phone number, and the last six digits of their debit card. A link was then sent containing what appeared to be an official GTCO complaint form — complete with the bank’s logo — asking for the same details plus full account information. These details, if submitted by an unsuspecting customer, give the scammer everything needed to initiate a transaction reversal, account takeover, or card-present fraud. The form looks authentic because it uses the bank’s real branding. Furthermore, the URL is usually a close variation of the bank’s real domain — for example, gtbankng-support.com instead of gtbank.com — designed to pass a rapid visual check.

Tactic Three: The WhatsApp Screen-Sharing Scam

This tactic is newer and more technically sophisticated. Research published by ESET in November 2025 documented a fast-spreading screen-sharing fraud operating through WhatsApp video calls. The scam begins with an unexpected WhatsApp video call from an unknown number. The caller claims to be a bank employee and creates immediate panic — telling you there is a fraudulent charge on your account that requires urgent action. They then ask you to tap the screen-share button in the WhatsApp call interface, claiming they need to see your account to “fix” the issue. Once you share your screen, the operator watches in real time as you open your banking app, enter your PIN, and navigate your account. They capture OTPs, passwords, and transfer authorisation codes as they appear on screen, then drain your account before the call ends. In one documented international case, a victim lost approximately US$700,000 through this method. In Nigeria’s context, where banking apps display live balances and OTPs via on-screen notifications, this attack is particularly dangerous. The solution is absolute: never share your screen with any caller on any platform, regardless of what they claim.

Tactic Four: WhatsApp Account Hijacking via Call Forwarding

This is the most technically advanced variant. Scammers trick a victim into activating call forwarding by dialling a specific number — often presented as a service code. Once calls forward to the scammer’s number, the attacker initiates WhatsApp registration on a new device and selects the “send OTP via phone call” option. The OTP call reaches the scammer, not the victim. The attacker then completes registration, takes over the victim’s WhatsApp, and uses the account to message the victim’s contacts requesting emergency money transfers. Scammers tailor the urgency story to the victim’s known interests or relationships, which is why victims’ contacts often comply — the message appears to come from someone they trust.

Real Cases: How Much Nigerians Have Lost to Bank Impersonation Fraud

The financial damage from fake WhatsApp customer care and bank impersonation fraud in Nigeria is documented and substantial. Three of Nigeria’s biggest banks recorded a combined ₦2.13 billion in fraud and forgery losses in 2025 alone, according to an analysis of their audited financial statements by Legit.ng. Between 2019 and July 2023, Nigerians lost N51 billion in total to banking-related fraud, according to figures cited by First Bank in public fraud alerts. In 2023, a Nigerian lost US$1,500 to a scammer impersonating UBA on social media. These are not edge cases. They are the everyday reality of banking in Nigeria’s current digital environment.

Why Scammers Specifically Target GTBank, Zenith, Access Bank and UBA

These four banks are targeted disproportionately because they are the most widely held and most actively discussed on Nigerian social media. The volume of daily complaints about these banks on X and Facebook is enormous — providing a continuous, real-time stream of potential victims to monitor. Additionally, all four banks use legitimate WhatsApp channels for certain services, which creates ambiguity that scammers exploit. UBA customers can chat with the bank’s Leo assistant via WhatsApp. GTBank offers support through its Mate AI assistant inside its app. Scammers use this public knowledge to make their impersonation sound credible — “I’m from the GTBank WhatsApp support team” sounds plausible precisely because GTBank does operate digital assistant services. The distinction that matters is this: genuine bank WhatsApp services are always initiated from the bank’s verified account, accessible only through the official app or verified website. No legitimate bank representative will contact you first through a random number.

People Also Ask: Fake Bank Scams on WhatsApp

How do I identify a real bank customer care WhatsApp number in Nigeria?

Real bank customer care WhatsApp numbers are listed exclusively on the bank’s official website and inside the bank’s official mobile app. For GTBank, the verified customer care number is 0700 482 6368. For Zenith Bank, customers use 0700 102 1000. For Access Bank, the official line is 01 2712005. For UBA, customers reach support at 07002255822. These numbers change periodically, so always verify directly on the bank’s official site or app — never from a Google search result, a social media post, or a message sent to you by someone claiming to be the bank.

What should I do if I already shared my OTP with a fake bank agent?

Act immediately. Call your bank’s official fraud hotline directly — not the number that contacted you — and request an immediate account freeze. Report the incident to the EFCC at efcc.gov.ng and to the CBN’s Consumer Protection Department at cpd@cbn.gov.ng. Change your internet banking password and PIN from a secure device. If your WhatsApp was compromised, navigate to WhatsApp Settings, then Account, then Two-Step Verification, and enable a six-digit PIN. Then deregister your WhatsApp from all other devices by going to Settings and selecting Linked Devices. Speed matters — every minute of delay increases the likelihood that the fraudster completes a transfer before the bank’s fraud desk responds.

The Insight Most Guides Miss: Why the Social Media Complaint Pattern Is the Biggest Risk Factor

Here is the specific vulnerability that most Nigerian cybersecurity guides fail to address directly: the act of posting a public complaint about your bank on social media is itself the trigger that initiates these scams. Scammers do not find victims through random targeting. They find them through deliberate, real-time monitoring of bank-related hashtags and handles on X and Facebook. The implication is counterintuitive but important: posting publicly about a banking problem — even legitimately seeking help — exposes you to fake WhatsApp customer care fraud within minutes of the post going live. The safer approach is to complain directly and privately through the bank’s official app, official website contact form, or verified phone number. If you must post publicly, never include your phone number, account number, or any transaction details. Furthermore, never respond to a reply from an account that is not the bank’s verified, blue-tick handle. This one behavioural change eliminates the most common entry point for fake bank impersonation fraud in Nigeria. The same pattern of social media exploitation appears across other scam categories — our investigation into fake giveaways on social media that misuse Dangote, MTN and other trusted names shows how fraudsters monitor public posts to identify and target victims across multiple scam types. Additionally, the use of AI-generated content to build fake credibility in bank impersonation is growing, following the same trajectory documented in our analysis of AI investment scams that use deepfake Nigerian celebrity videos.

For verified official customer care numbers for all major Nigerian banks and fintechs, cross-reference the full list of genuine Nigerian bank customer care numbers for 2026 published by Legit.ng, which includes verified channels for Access Bank, Zenith Bank, GTBank, UBA, OPay and others. Furthermore, the Africa Check 2026 scam trends guide documents confirmed fake bank pages and provides ongoing fact-check coverage of new impersonation accounts as they appear.

Key Takeaways and How to Protect Yourself from Fake WhatsApp Customer Care Fraud

Fake WhatsApp customer care fraud is structured, targeted, and growing in sophistication. The most important protections are these. First, never share your OTP, PIN, BVN, or card details with any caller, WhatsApp contact, or form link — regardless of how credible the contact appears. Second, never share your screen on a WhatsApp video call with anyone claiming to be from a bank. Third, find your bank’s customer care number only on the bank’s official website or app — not from a Google search or social media post. Fourth, if you must complain publicly about a banking problem, do not include personal details, and respond only to verified, blue-tick accounts. Finally, enable WhatsApp Two-Step Verification immediately — this single step blocks the call-forwarding account takeover attack. If you suspect you have been targeted by a fake WhatsApp customer care operation, report it to the EFCC and to your bank’s fraud desk without delay. Your report directly helps prevent the next victim from experiencing the same loss. Similar impersonation tactics also appear in fake government job recruitment schemes — our guide on spotting fake government job recruitment scams in Nigeria covers the same psychological manipulation techniques used in a different context.