Jaipur, Oct. 22 -- Cybercriminals are increasingly targeting people by hijacking their WhatsApp accounts and using them to defraud friends, relatives and contacts, prompting Rajasthan Police's R-4-C cybercrime wing to issue an advisory on prevention and response measures, officials said on Wednesday. The cybercrime wing has warned people against sharing verification codes, scanning suspicious QR codes and installing unverified applications. Additional director general of police (cyber crime) VK Singh said fraudsters use fake QR codes, social engineering and stolen one-time passwords (OTPs) to gain access to WhatsApp accounts. Once in control, they impersonate the account holder and send messages to people in their contact list seeking money on the pretext of a medical emergency or other urgent need. They may also circulate suspicious links to compromise additional accounts. According to the advisory, criminals may trick users into linking their WhatsApp accounts to an unknown device through fraudulent links or QR codes. They may pose as friends or customer support representatives to obtain OTPs, verification codes or two-step verification PINs. In some cases, suspicious applications are used to misuse SMS, notification or accessibility permissions. Fraudsters may also persuade victims to install remote-access or screen-sharing applications, allowing them to monitor or control activities on their phones. Police have advised users to remain alert if they notice an unknown device under WhatsApp's 'Linked devices' section, messages being sent without their knowledge, or chats being accessed without permission. Receiving an unexpected verification code, being suddenly logged out of WhatsApp or receiving calls from acquaintances saying that money is being demanded from their accounts are other possible warning signs. The advisory recommends enabling two-step verification, setting a strong PIN and adding a recovery email. Users should never share OTPs, registration codes or verification PINs, as WhatsApp and legitimate officials do not ask for these credentials. People should regularly check linked devices and log out any unfamiliar device. They should also keep their phone's operating system and applications updated, avoid installing unknown APK files and refrain from sharing their screens or installing remote-access applications at anyone's request. If someone seeks money unexpectedly through WhatsApp, users should verify the request by calling the person through a separate communication channel. Singh said if users suspect their account has been hijacked, police advised them to open WhatsApp settings, check linked devices and log out unfamiliar sessions. They should re-register WhatsApp using their phone number and never share verification code during the process. Users should also review their two-step verification and email security, change compromised PINs or passwords, remove suspicious applications and check app permissions. Besides, suspicious messages, phone numbers, URLs, screenshots and transaction details should be preserved as evidence. Victims or those who encounter such attempts should inform cyberpolice at the earliest....