The WhatsApp Giveaway With an Unpaid Internship

The freebie comes with a job

Your friend sends useful things. Restaurant tips. Good sales. Cat videos. Naturally, their name gets a warmer welcome than a stranger's message.

But a genuine friend can forward a fake offer.

In the giveaway flagged by NCC-CSIRT, the promised reward was mobile data and airtime, meaning prepaid phone credit. The sharing requirement put people to work promoting it before they had received anything.

Apparently, the freebie came with an unpaid internship.

Three forwards are not three reviews

Imagine three friends recommending a restaurant they each tried. That is useful information. Now imagine all three simply forwarded the restaurant's ad. You have three messengers, but only one sales pitch.

This is Connor's connection to social proof: looking at what other people do for clues about what we should do. It is often useful. The missing question is whether their actions rest on independent knowledge.

In a 2007 experiment, people estimated wider support for a land-preservation proposal after reading repeated comments from one person, compared with a single comment. The pattern remained among participants who correctly remembered that the comments came from one person.

That finding concerns perceived support, not giveaway legitimacy or scam clicks. It does not mean repetition is always as persuasive as several independent voices. It gives us a useful question: how many people actually checked this?

Verify before you volunteer

Before forwarding an offer, open the provider's official app or website yourself. Look for the promotion there. If you cannot confirm it, leave it out of the group chat and keep your phone number to yourself.

Asking your friend “Did you get the reward?” is more useful than counting how many times the message arrived. Still, use the provider's own channel to verify the offer rather than relying on a forwarded success story.

Already shared it? Send a correction where you sent the original. For example: “I couldn't verify that giveaway. Please don't use the link I sent.” No dramatic confession required. Just useful information for the next person.

What is the actual warning?

NCC-CSIRT describes information collection and a forwarding loop. It does not report a WhatsApp software breach or establish a total number of victims, confirmed account takeovers, or financial losses. Later fraud is a risk, not a proven outcome for everyone who supplied a number.

This page is an article adaptation of Connor's September 26 video, not a verbatim transcript. The advisory's changing date banner is not used as its publication date.

Check the offer before you lend it your name.