(Essentials in Nederlands: https://www.security.nl/posting/639147/Slachtoffers+WhatsApp-fraude+vorig+jaar+voor+1+miljoen+opgelicht#posting639165). WhatsApp accounts are being hijacked in the Netherlands by scammers who make the WhatsApp server set up a phone call to the victim for account verification. If the victim does not pick up the phone, the secret that is mentioned in the call will end up in the user's voicemail box - which often is "protected" with a default pin code. By accessing the user's voicemail, the attackers obtain the secret and enter that on WhatsApp website, completing the identity theft and WhatsApp account hijack. A risk that I just thought of, is the following (maybe usefull for the FBI if they want access to various accounts from terrorists, dead or alive, whose smartphone they obtained but are unable to unlock its screen ;-). Even if SMS messages are not shown on a locked screen (which is a sensible configuration that most people do not use), then either a thief or finder of a lost ...