Pink WhatsApp Scam: How to Protect Your Phone

Pink WhatsApp Scam Quick answer

Question	Answer
Is Pink WhatsApp real?	No. WhatsApp has never released a pink version.
What is it actually?	A malicious Android APK spread through forwarded chat links.
Who warned about it?	Mumbai Police (India) and MyCERT (Malaysia).
What does it steal?	Contacts, photos, SMS, OTPs, and saved credentials.
Is iPhone affected?	The APK cannot install on iOS, but the link still leads to phishing pages.
Already installed it?	Uninstall immediately, then follow the recovery steps below.

What is the Pink WhatsApp scam?

Pink WhatsApp is a fake app that pretends to be an official WhatsApp update offering a pink theme, extra privacy features, and larger file sharing. In reality it is a variant of a wormable Android malware — a strain that first surfaced in 2021 as a WhatsApp auto-reply worm and resurfaced in mid-2023 in India before spreading to Malaysia and beyond.

According to MyCERT, Malaysia’s national cyber emergency response team, the app is distributed through websites made to look like Google Play. Users think they are installing from an official store. They are not.

Mumbai Police put it plainly in their advisory: the “New Pink Look WhatsApp with extra features” doing rounds among users is a hoax that can lead to hacking of your mobile through malicious software.

Why it keeps coming back

This scam has been recycled every year since 2021, and it works for three reasons:

1. It arrives from someone you trust. The malware auto-replies to your contacts, so the link comes from your cousin’s real number, not a stranger.
2. It costs nothing. A free upgrade feels low-risk.
3. It looks official. The fake download page copies Google Play’s layout, colours, and fake review counts.

Expect it to return with a different colour name green, gold, blue. The mechanism is identical.

How the scam actually works, step by step

1. The bait. A forwarded WhatsApp message with a pink WhatsApp logo, a short hype line, and a shortened link.
2. The fake store. The link opens a page that imitates Google Play, complete with fake ratings.
3. The APK. You download a file outside the Play Store. Android shows a warning; the page tells you to ignore it and enable “Install from unknown sources”.
4. The permissions grab. On first launch the app asks for contacts, SMS, storage, notification access, and often Accessibility Service — the permission that lets an app read and control your screen.
5. The takeover. With SMS and notification access, the malware can read banking OTPs. With contacts, it forwards the same link onward from your number.
6. The damage. Financial fraud, account takeovers, spam blasts sent in your name, and your photos in someone else’s hands.

Warning signs your phone is already infected

• WhatsApp icon changed colour or the app name looks slightly off
• Messages you never sent appear in your Sent chats
• Friends report a “pink WhatsApp” link coming from your number
• Battery drains unusually fast and the phone runs hot when idle
• Unfamiliar apps in your app drawer
• Mobile data usage spikes with no change in your habits
• OTP SMS arriving for logins you did not attempt
• Aggressive full-screen ads appearing outside any app

How to remove Pink WhatsApp: exact steps

Do these in order. Do not skip step 1.

Step 1 — Disconnect. Turn on Aeroplane Mode. This stops the malware from sending data out or forwarding links while you clean up.

Step 2 — Revoke Accessibility access. Settings → Accessibility → Downloaded apps. Turn off anything you do not recognise. Malware often blocks uninstall until you do this first.

Step 3 — Revoke Device Admin. Settings → Security → Device admin apps. Deactivate any unknown entry.

Step 4 — Uninstall. Settings → Apps → find the fake app → Uninstall. If Uninstall is greyed out, repeat steps 2 and 3.

Step 5 — Boot into Safe Mode if it will not uninstall. Hold the power button, then long-press “Power off” until Safe Mode appears. Third-party apps are disabled in Safe Mode, so the uninstall will go through.

Step 6 — Run Play Protect. Play Store → your profile icon → Play Protect → Scan.

Step 7 — Log out everywhere. In the real WhatsApp: Settings → Linked Devices → log out of all sessions.

Step 8 — Change passwords. Banking, UPI, email, and social accounts — from a different, clean device if possible. Enable two-factor authentication on each.

Step 9 — Turn on WhatsApp two-step verification. Settings → Account → Two-step verification → Enable, and set a 6-digit PIN.

Step 10 — Warn your contacts. Tell them not to open any link that came from you recently.

Step 11 — Factory reset if symptoms persist. Back up photos and documents only, not apps, then reset.

If money has already been lost (India)

Act fast — the first few hours matter most.

• Call the National Cyber Crime Helpline: 1930
• File a complaint at cybercrime.gov.in
• Inform your bank immediately and request the transaction be blocked or reversed
• Keep screenshots of the message, the link, and any transaction SMS as evidence

How to avoid this class of scam permanently

• Install apps only from the Google Play Store or Apple App Store. No exceptions for “special” versions.
• Keep “Install unknown apps” switched off for Chrome, WhatsApp, and your file manager. Settings → Apps → Special access → Install unknown apps.
• Treat forwarded links as unverified, even from family. Ask them where they got it.
• Verify features at the source. Real WhatsApp changes are announced on WhatsApp’s official blog and roll out through the Play Store automatically.
• Never grant Accessibility Service to an app that has no reason to need it.
• Keep Play Protect on and let Android security updates install.
• Enable two-step verification on WhatsApp today, not after an incident.

The rule that covers all of it

WhatsApp is free, and it updates itself through the Play Store. Any message offering you a “new version”, a “special theme”, or “hidden features” through a download link is a scam — regardless of the colour it promises, and regardless of who forwarded it.

Frequently asked questions

Is there any official pink theme for WhatsApp?

No. WhatsApp offers light and dark themes and chat wallpapers only. There is no pink app version.

Can Pink WhatsApp infect an iPhone?

The APK cannot install on iOS. But the link can still open phishing pages that harvest your Apple ID or bank credentials, so avoid it on any device.

I clicked the link but did not install anything. Am I safe?

Very likely yes. Clear your browser cache, delete any downloaded APK from your Downloads folder, and run a Play Protect scan to confirm.

Does antivirus alone remove it?

Not reliably. The malware often holds Accessibility and Device Admin permissions that block removal. Revoke those permissions first, then uninstall.

Can it read my banking OTP?

Yes, if you granted SMS or notification access. That is exactly why you should change banking passwords and enable two-factor authentication after removal.

Will a factory reset definitely clean it?

Yes for this malware type — but restore photos and files only, never a full app backup, or you may reinstall the infected app.