To protect customers from WhatsApp scams that impersonate your store, publish one official WhatsApp number everywhere you own (website, order confirmations, packaging), keep your business profile consistent, and tell customers plainly what you will never ask for in chat: card numbers, CVVs, one-time passwords or payment to a personal account. When a fake shows up, warn customers fast and report the number to WhatsApp.
You can't stop someone creating a WhatsApp account with your logo. You can make it much harder for that fake to fool your customers. Here's how.
How WhatsApp impersonation scams usually work
The patterns repeat across markets. Some I'd expect any growing store to run into eventually:
The "delivery problem" message. A fake account with your logo messages a customer: "Your parcel is held, pay a 15 AED redelivery fee here." The link goes to a payment phishing page.
The prize or gift card. "Congratulations, you've won a ₹5,000 voucher from [Your Store]. Send us the code we just texted you to claim it." That code is a WhatsApp or bank verification code, and sharing it can hand over the customer's account.
The fake sale. A cloned profile shares "70% off, pay by bank transfer only" in groups and statuses.
The fake support agent. A customer complains publicly on Instagram, and a fake "support" account messages them on WhatsApp asking for card details "to process the refund".
COD switch. A fake messages a COD customer: "Courier can't take cash, please prepay to this account."
WhatsApp's own guidance on suspicious messages lists the warning signs: requests for money or financial details, links to tap, pressure, and accounts posing as well-known businesses. Your job is to make those signs obvious to your customers.
Step 1: Publish one official number, everywhere
The single most useful thing you can do. If customers know your number, a different one stands out.
Put your WhatsApp number on your contact page, footer and order confirmation pages.
Use the same number on your Instagram, Facebook and Google Business profile.
Print it on packaging inserts.
Use the same number for your chat button. WhatFlow's theme-matched WhatsApp chat buttons are free and link to your real number, so customers who start a chat from your site are always talking to you.
Our only WhatsApp number is [your number]. If anyone contacts you from a different number claiming to be us, it isn't us. Please don't send them money or codes, and let us know.
Avoid running support from several staff phones. Every extra number is another one customers can't verify, and it makes a fake look normal. That's one of the arguments in our comparison of a shared WhatsApp inbox vs personal staff phones.
Step 2: Make your profile recognisable
A complete, consistent business profile is harder to copy convincingly:
Your real business name, logo and website link.
Business description, address (if you have one) and hours.
The same display name as your website and social accounts.
A verified badge helps where you can get one. According to WhatsApp's page on verified business accounts, the badge shows Meta has checked the account, and subscribing to Meta Verified doesn't guarantee it. Treat it as a bonus, not your main defence: customers still need to know your number. Our green tick guide explains the options as of November 2026.
Step 3: Tell customers what you never ask for
Write a short "we will never" list and put it on your FAQ page, your contact page and your first-order messages.
[Your Store] will never:
Ask for your card number, CVV or bank PIN on WhatsApp.
Ask you to share a one-time password (OTP) or verification code.
Ask you to pay into a personal bank account or wallet.
Ask you to pay a "release fee" for a held parcel.
If someone does, it's not us. Report and block the number and message us on [your number].
Then actually live by it. The WhatsApp Business Messaging Policy tells businesses not to ask people to share full payment card numbers, and if your own team ever asks for card details in chat "just this once", you've taught customers that the request is normal. For paid order edits, use Shopify's invoice, as covered in our guide to order edits and address changes on WhatsApp.
You can also slip a gentle reminder into order messages:
Thanks for your order! Your tracking updates will come from this number only. We never ask for card details or codes on WhatsApp.
Step 4: Use templates customers learn to recognise
On the WhatsApp Business API, the messages you send outside a live conversation are Meta-approved templates, so they're consistent by nature. Use that. Same tone, same structure, same sign-off, from the same number. Customers notice when a "message from you" doesn't look like your messages.
WhatFlow sends order, shipping and COD confirmation messages from your connected number using the official Meta WhatsApp Cloud API. Our library of WhatsApp message templates for Shopify has examples to base yours on.
Step 5: When a fake shows up, move fast
Say a customer forwards you a screenshot of a fake account. Here's what I'd do that same day.
Thank the customer and confirm it's fake.
Thank you so much for sending this. That number isn't ours. Please don't send them any money or codes. Could you report and block it in WhatsApp? Open the chat, tap the name, then Report. Our only number is this one.
Report it yourself. WhatsApp's block and report steps work for any number that has messaged you. When someone reports, WhatsApp receives the last few messages from that sender. WhatsApp also has a page on reporting a merchant for fraud.
Warn customers publicly. Post on Instagram stories, pin it on your site for a week, and if it's spreading, consider a WhatsApp broadcast to opted-in customers.
Heads-up: a fake WhatsApp account using our logo is messaging people about "held parcels". It's not us. Our only number is [your number], and we never ask for payment or codes in chat. If you've been contacted, please report and block the number.
Help anyone who already paid. You're not liable for a scammer's actions, but your customer is upset and it's your brand on the fake. Tell them to contact their bank or card provider immediately, and report it to local authorities where that's available. Be kind; they trusted your logo.
Log it. Note the fake number, the date and the message pattern. If it comes back, you'll spot it faster.
Step 6: Brief your team
Anyone answering your WhatsApp should know:
the "we will never" list, word for word
the reply above for "is this number yours?"
to escalate any impersonation report to the owner the same day
Put it in your customer service playbook. It's also a good question for a support hire's trial task: give them a "I won a gift card from your store, do I send the code?" message and see what they write.
Don't make your real messages look like scams
Some stores accidentally train customers to trust scam-shaped messages. Watch for these habits in your own messaging:
Shortened or odd links. Link to your own domain where you can, so customers see a familiar address.
Urgency for no reason. "Pay within 1 hour or your order is cancelled" is exactly what scammers write.
Payment requests in chat. If a customer needs to pay a difference, send it through Shopify, never as account details typed into WhatsApp.
Messages from new numbers. Changing your WhatsApp number every few months makes every fake look plausible. Pick one and keep it.
The more predictable your genuine messages are, the more a fake one stands out.
Protect your own account too
Scammers sometimes go after the business account itself. Turn on two-step verification on any WhatsApp Business app number, and limit who in your team has access to Meta Business settings. On the API, keep your Meta Business admin list short and use individual logins, never a shared password.
Free plan available
Run WhatsApp for your Shopify store with WhatFlow
Templates, COD confirmation, Shopify Flow automations and a shared team inbox with no seat fees. Every feature is included on every plan, including Free.
The stores whose customers don't fall for fakes are the ones that were consistent before the fake appeared: one number, one tone, one clear "we will never" promise. Set that up this week, and the next time a fake account appears, your customers will be the ones messaging you to say "this isn't you, right?"
Frequently asked questions
What should I do if someone is impersonating my business on WhatsApp?
Report the number to WhatsApp from the chat or business profile, warn customers on your website and social channels with your one official number, and ask affected customers to report and block the scammer too.
How can customers tell my real WhatsApp number from a fake one?
Publish one official number on your website, order confirmations and packaging, and keep your business profile name, logo and website consistent. A verified badge helps where you have one, but customers should check the number against your site.
Can I get a verified badge on WhatsApp Business?
Meta can show a verified badge on business accounts it has checked, typically through Meta Verified. Subscribing doesn't guarantee a badge, and Meta can remove it if requirements stop being met.
Should a store ever ask for an OTP on WhatsApp?
No. A store has no reason to ask a customer for a one-time password, card number or CVV in chat, and saying so publicly makes scams easier to spot.
