Account Takeover: Dance Voting Scam Targets WhatsApp Accounts Again
Summary
Why is this warning issued?
This warning has been included because it is based on a report from Watchlist Internet. It is intended to protect other users from this scam. The assessed risk is elevated.
How the scam works
- Criminals use already compromised WhatsApp accounts and message their contacts.
- The message asks you to vote for a friend's daughter (e.g., 'Eliska') in a dance voting.
- A link leads to a fake voting page (e.g., school-battles.com) that appears legitimate.
- To cast your vote, you are asked to enter your phone number.
- You are then asked to enter an eight-digit code that was sent to you – supposedly for secure verification. In reality, this code links your WhatsApp account to the criminals' device.
- Your WhatsApp account is taken over and used to send further messages to your contacts.
- Further scam attempts are then sent via your compromised account – such as an urgent request for a quick payment (e.g., 670 euros) for a supposed dentist bill.
How to recognise it
- You receive a message from someone in your contact list asking you to vote for a friend's daughter – usually for an alleged dance scholarship.
- The message contains a link to a voting page (in the current case: school-battles.com) that was registered only a few days earlier.
- You are asked to enter your phone number and then an eight-digit code to confirm your vote or link your phone to the voting.
- The featured dancers appear unrealistic due to AI-generated images; the real school ('Erste internationale Ballettschule Prag') has nothing to do with the campaign.
- The links on the fake platform do not work.
- Later on, messages arrive with absurd money demands – for example, 670 euros for a supposedly urgent dentist bill.
- Prize without taking part, or a 'free' offer that requires providing personal data
- Upfront payment demanded for 'fees/taxes'
How to protect yourself
- Do not click on links in messages that unexpectedly ask you to vote or cast a vote – even if they come from a known person.
- Never share a code sent to you via SMS or WhatsApp with third parties. Such codes are used to link your account.
- Verify the request through a second channel (phone call, in-person meeting) before taking any action.
- If your account has been compromised: Inform your most important contacts quickly through other channels (SMS, phone call, other messengers) so they do not fall for the scam.
- Use WhatsApp's step-by-step guide to recover a hijacked account, and file a police report.
What you should never do
- Do not open links in voting or contest messages that arrive unexpectedly.
- Do not share confirmation codes or personal data with alleged voting platforms.
- Do not transfer money if you are pressured via messenger to make a quick payment – for example, for a supposedly urgent dentist bill.
- Do not assume a message is genuine just because it comes from your contact list.
Frequently asked questions
Do I have to provide my phone number for the alleged voting?
No. Legitimate contests or votings do not require linking to your WhatsApp account or a confirmation code. Do not provide either the number or the code.
What happens if I share the eight-digit code?
With this code, criminals can transfer your WhatsApp account to their device and send messages to all your contacts in your name.
How do the criminals have my data?
As a rule, the messages come from an already compromised WhatsApp account of one of your contacts. The criminals do not need to know your number in advance – they simply message all contacts of that account.
How can I tell if my account has been compromised?
Typical signs include unusual activities you did not trigger yourself, or messages from contacts pointing out strange messages from you. Check your active devices in the WhatsApp settings.
What can I do if I have transferred money?
Contact your bank immediately and try to stop the transfer. Additionally, file a police report. However, a chargeback for an instant transfer is often difficult.
Affected data
Comments
No comments yet. Registered users can share their experiences.
Related warnings
- Vorsicht vor Telekom-Fake-Mails: So erkennen Sie die Betrugsmasche
- Gefahr durch falsche Termineinladungen per E-Mail
- "Quishing": Falsche QR-Codes in Mails, Briefen, ÖPNV und Straßenverkehr
- Gewinnbenachrichtigungen & Vorschussbetrug
- Abofallen & versteckte Kosten
- Schockanrufe: Wenn Angst und Zeitdruck zur Falle werden
Original source
Find more information in the original source.
Watchlist Internet ↗Update history
- 19/09/2026Description updated
- 17/09/2026Warning added from an official source