WhatsApp Romance Scam: 8 Checks Before You Send Money

You may feel torn between trust and doubt, especially if the chat has lasted for weeks or months. You do not need to prove a scam to say no to money, codes, passwords, or a request that makes you feel unsafe. A pause is a valid choice.

Use these eight checks in order

1. Stop the risky request.
2. Protect money and account access.
3. Save the messages that matter.
4. Review the pattern of requests.
5. Check one public claim.
6. Search the exact photo, if needed.
7. Read the source and choose a next step.
8. Block, report, and seek the right help.

If money has already moved, call your bank or payment service now using its usual app or official number. If there is immediate danger in Australia, call Triple Zero (000), as set out in Australian Cyber Security Centre guidance. A search can wait while you get help.

This guide keeps each task small: deal with the request, check only what matters, then stop. It is not a way to track someone, reach private accounts, or expose the person in a photo. You can leave the identity question open and still protect yourself.

Protect the thing at risk first: your money, login, phone, or personal safety. Scamwatch says to contact your bank or card provider at once after a scam and ask it to stop transactions. Do not wait for a face match, a full file of proof, or a reply from the chat before asking for help.

Follow a short action plan

The rows set an order, not a reason to delay urgent help. Tell the service what you sent or shared, when it happened, and which account or device is affected. Ask what can be stopped, secured, or disputed; do not assume recovery is certain.

A person can use a real name and their own photo while making an unsafe request. An innocent person's stolen photo can also appear in a harmful chat. Neither case changes the need to protect the money or account at risk.

If someone threatens to share intimate images, use eSafety's image-based abuse reporting route when you or the person responsible usually lives in Australia. You can ask for help without first finding every copy or reporting to the platform. Keep the threat text if safe; do not save or share sexual images of anyone under 18.

Scamwatch's relationship-scam signs include fast emotional trust, money or crypto requests, secrecy, and repeated reasons not to meet. Moving to WhatsApp is one part of a wider pattern, not proof by itself. Focus on what the person asks you to do and how they react when you set a limit.

Look at the request, not the polish

An urgent travel fee, medical bill, parcel charge, or investment pitch can make you feel that help cannot wait. Slow down and keep the money where it is. Check the claim through a channel you find yourself, rather than a payment link sent in the chat.

The WhatsApp scam help page warns about requests for money or personal details and suspicious links. A warm tone, a long chat, or a clear profile photo does not make such a request safe. Do not share a one-time code, login, card details, or remote access to a device.

• Urgency: a deadline leaves no time to ask a trusted person.
• Secrecy: you are told to hide the chat from family, friends, or your bank.
• Control: the person gets angry when you decline, slow down, or ask a question.
• Money: each paid problem leads to another fee or a new reason for help.

Grammar, an accent, travel, a new account, or a private life does not prove a scam. Nor does declining a call: a person may have a valid reason. A limit remains yours to set even when you do not know why a detail is missing.

Use the dating-safety hub for a broader view of boundaries and photo checks. Keep the current decision narrow: can you safely agree to this request? You do not need to decide who the person really is to refuse it.

Choose one public claim that affects your next step, then open a source that can answer it. An official organisation page may support a public role or event, but it cannot show who runs a WhatsApp chat. Leave private details out, and stop if the source cannot resolve the claim you chose.

Write the question before you search

“Should I send money?” does not need a people search; you can decline. “Does this named charity have an official website?” is a smaller public-source task. Start at the charity's own site and check its published contact route instead of using the number or link supplied in chat.

The same rule applies to a public job, event, or project. Go to the source you found on your own, then record only what it says. A real employer or real event is not proof that the person messaging you belongs to it.

1. Write the exact claim and why it matters.
2. Find the official page through your own search.
3. Note the page date and what it supports.
4. Keep any unresolved gap open.

Do not gather home addresses, relatives, private profiles, or identity documents. Do not call a stranger's employer or family to test a match. If the account is already threatening or pressuring you, use the official support routes instead of extending the search.

A short call may add context if both people want it, but it is not a background check or a safety promise. Do not demand a pose, a fresh intimate photo, or a view of someone's home. You can end contact without forcing another person to prove a private detail.

Our military romance-scam guide shows how official public sources can test a specific story about service and fees. Its rule also fits WhatsApp: record the claim, check its source, and avoid blaming the person whose photo was used.

Google image search can show similar images and sites that contain the same or a similar photo. Open the page and read its date, caption, and context before drawing a conclusion. A photo found elsewhere can show reuse, but it cannot tell you who controls the chat or whether the request is safe.

Start with the exact picture

Use a picture you are permitted to search and crop out names, chat text, notifications, and other people. Keep a copy of the original if it matters for a report. Search the whole permitted image first, then a tighter crop only if the background takes over the results.

Open a useful source rather than relying on its small preview. Check whether it shows the same picture, an edited copy, a similar scene, or a different photo. Note the source URL and the narrow fact the page supports.

A photo may appear on a news site, fan page, stock-image site, old profile, or repost. Finding it under a different name does not prove which name is right or who copied whom. Do not contact the person pictured or post a public accusation.

Use a face search only if a real question remains

The public-web search methodology describes candidate pages that need manual review. A face-focused search may find a similar face in other public photos, but it does not reach private accounts or platform-internal data. The dating photo-search comparison explains when these two methods answer different questions.

No useful result means the search did not resolve the photo question. It does not mean the person is real, fake, safe, or a scammer. Keep that uncertainty in your notes and return to the conduct that affects your next step.

Keep the chat request and the photo result in separate parts of your notes. The request can justify stopping; the photo can add public context to review. A match, a conflict, or no useful result cannot settle who runs the account, so choose a safe next step without trying to force a verdict.

Example: a travel payment request and a reused photo

This is a hypothetical example, not a customer case. A contact asks you to pay a travel fee, then an image search finds their profile picture in an old public article. Save the request and source URL, but keep their meanings separate: payment pressure and photo reuse are two different facts.

You can refuse the payment and end contact without naming an operator. If the image search returns nothing, the payment boundary stays the same. The search has not answered the photo question, and it cannot make an unsafe request safe.

Use a stopping rule

Stop if conduct is unsafe, the public question has been answered, or another search would not change your choice. Do not keep uploading the picture across tools to collect more weak matches. More pages are not always more evidence, especially when they copy the same source.

A respectful conversation may still leave gaps that you cannot check. You can choose to slow down, share less, or walk away. What matters is that you can make a choice you are comfortable with, rather than treating a search result as permission to trust.

Use each official route for its own purpose: WhatsApp for the account, your bank for money, and Australian support channels for the harm involved. A platform report does not also contact your bank or file a police report. Save the facts needed for each route, and use a link or number you find independently.

What our current source review found

For this guide, we reviewed the official routes below on 7 October 2026 and checked what each handles. The useful distinction is who receives the report and what they can act on. A single “report scam” button is not a complete recovery plan.

WhatsApp's help page says a report can send up to the last five received messages and basic information about up to the last five calls. It says the reported user is not notified. That is the platform's stated process, not a promise of action, payment recovery, or a legal outcome.

A limited report is also not a full chat backup. WhatsApp's help distinguishes blocking from options that may clear a chat, so preserve the needed lawful evidence before choosing to clear it. Follow the current instructions for your device; this guide did not submit a test report.

Before blocking, save key requests, dates, receipts, and report confirmations when safe. Avoid forwarding intimate material, publishing names from search, or asking a crowd to identify a face. Report the account and conduct you saw, with guesses clearly left out.

Scamwatch advises fast action and says there is no shame in being scammed. Contact the affected provider, explain what happened, and ask what can still be stopped or secured. Then preserve the key evidence, use the right report route, and seek support from someone you trust rather than paying for a promised recovery.

Tell the service exactly what was exposed

Money, a password, an identity document, a one-time code, and remote device access are different problems. Tell the bank or affected service which one happened. Use its official support instructions to change exposed logins, review sessions, and secure your device.

Ask for a case number and write down the next step. A receipt, time, destination, and short description may be more useful than a long collection of face-search results. Keep your record focused on the event the provider can act on.

The Scamwatch recovery page links to IDCARE for a free plan to limit identity and cyber harm. It also warns about follow-up scams, including offers to get your money back. Find support through the official page instead of a number supplied by a new “recovery agent”.

If you are helping a friend

Scamwatch's advice for helping someone starts with concern and practical support rather than blame. Offer to sit with them while they call the bank or open the official help page. Avoid a public confrontation or a demand that they admit the whole relationship was false before they can accept help.

One safe step can come before certainty about the story. Let the person keep control of their own accounts and choices; do not take passwords or share their messages widely. If threats or intimate images are involved, use the relevant specialist route rather than negotiating with the account.

See how public source pages are reviewed

The walkthrough below shows candidate pages and source review. It is not a fraud test, identity verdict, or recovery service. Use it only when a lawful photo question remains after the urgent steps above.