A trusted sender is not enough
The message can come from a friend or family member whose account has already been compromised. Ask them through another known channel.
Got a WhatsApp link? Check it first.
Does the page really show a photo – or is it trying to link your WhatsApp?
Paste the message or link. Shield does not open the destination page. It checks common Ghost Pairing patterns, the domain, and existing Shield reports.
For phone and computer
The suspicious page is not opened
Your input is not stored automatically
Act directly in WhatsApp now
- Open WhatsApp on your primary phone.
- Android: three dots → Linked devices. iPhone: Settings → Linked Devices.
- Open every unknown device and choose Log out. If in doubt, remove every session you cannot clearly identify.
- Enable two-step verification and add your own recovery email address.
- Warn your contacts if messages were already sent in your name. Report and block the suspicious contact.
Codes are not votes
A code described by WhatsApp as device linking does not confirm a photo or a vote. It links another device.
Go straight to the app
Open account settings directly in WhatsApp. Do not enter an alleged security check through a link someone sent you.
What this check can and cannot do
Shield detects known text, domain, and linking patterns without visiting the destination. A low rating is not approval or proof that a page is safe. Shield also cannot view your WhatsApp device list. That control intentionally stays on your phone.
Your input is processed for this check but is not automatically saved as a report. Server security logs do not contain form content.