A WhatsApp from "my boss" cost me thousands

A WhatsApp message arrived from "my boss"—new number, dead phone, urgent tone. They needed a wire to a vendor for a secret deal and told me not to loop finance because of an NDA. I almost sent tens of thousands before an executive assistant stopped me at the elevator.

CEO fraud moved from email to messaging apps. The phrasing matched Slack jokes I had posted publicly, probably scraped, and the payment details changed at the last minute with pressure not to verify.

Impersonation exploits hierarchy: junior staff want to look capable, and apps feel private even when they are not. New payee details should never live only inside a chat thread.

I wanted promotion energy—I told myself being indispensable meant moving fast without bothering busy executives.

My real manager was in a conference room; when I slipped in quietly they showed me their phone—no WhatsApp thread to me, no wire request. Relief and rage hit in the same breath.

I questioned my judgment at work for weeks even though policy gaps had set me up to succeed or fail alone.

Our company now requires voice or in-person confirmation for any new payee. I wish that rule had existed before the attempt.

• Finance teams: publish clear "we will never request wires via WhatsApp" rules and train staff.

For more help, see our Report a scam page and Spot and avoid scams guide.