WhatsApp Web Connections Trigger Account Bans Amid Security Glitch
Users of WhatsApp, both in Israel and globally, are reporting a wave of account suspensions and outright bans, with the latest issue linked to connecting to WhatsApp Web. This marks the third such widespread disruption affecting the messaging app in recent weeks, following similar problems that impacted Instagram as well.
The problem appears to stem from a new, unannounced security mechanism being tested by Meta, WhatsApp's parent company. This system is designed to detect unofficial browser extensions and clients that interact with WhatsApp. However, the security feature has been activated without a corresponding user-friendly warning screen, leading Meta's automated AI to mistakenly flag legitimate connections and even routine web requests as malicious activity.
Users attempting to log into WhatsApp Web by scanning the QR code on the official web address are finding their mobile app accounts suspended for 24 hours, displaying a red warning screen citing suspected spam activity. The issue seems particularly prevalent among Android users. Cybersecurity experts are advising users to avoid connecting any new devices to WhatsApp Web or using the desktop applications until Meta resolves the problem.
Experts suggest that the AI is struggling to differentiate between malicious actors using spyware and legitimate users employing popular Chrome extensions, ad blockers, or customer management systems. This rollout of server-side detection without adequate user safeguards is causing mass false alarms, disproportionately affecting heavy users who rely on desktop access for their work.
For those already connected to WhatsApp Web without issues, experts recommend not disconnecting, as doing so might trigger the ban. If an account is temporarily suspended, users should submit a review request within the app and wait for the 24-hour period to end. After regaining access, a "cooling-off" period is advised, involving disconnecting linked devices, removing unfamiliar browser extensions, and refraining from sending links or PDF files.
