WhatsApp Scam Alert Beta Flags Fraud Texts On-Device, No Data Leaves Your Phone

WhatsApp has started pushing a feature called Scam Alert to a limited group of Android beta testers, warning them in the chat itself when an incoming message from a stranger matches patterns Meta associates with known scams. The rollout is landing in recent Android beta builds around version 2.26.34, and it is off by default.

How the warning actually works

Scam Alert only looks at messages from people who are not already in your contacts. When you enable it, WhatsApp downloads a small machine learning model to your phone that checks the structure and language of an incoming message against patterns tied to previously reported scams. If it matches, a banner reading "This may be a scam" appears inside the conversation, visible only to the recipient. The sender never sees any indication that a warning fired.

From there you get three options: block and report the contact, mark the chat as trusted to silence future warnings, or ignore it. Marking a chat as trusted also lets you optionally share the last five messages from that conversation with WhatsApp, which the company says helps tune the model's accuracy.

Why Meta says nothing leaves your phone

In a technical write-up published on its engineering blog earlier this month, Meta laid out the privacy mechanics behind the feature. Message classification happens entirely on-device, and raw message content is never sent to WhatsApp or Meta for analysis or automatic reporting. The only data that leaves the phone is aggregated, anonymized telemetry — counts of warnings shown and actions taken — processed through what Meta describes as a confidential federated analytics pipeline using trusted execution environments and differential privacy noise, designed so individual users can't be singled out from the aggregate data.

That architecture matters because Scam Alert has to coexist with WhatsApp's end-to-end encryption. Server-side scanning of message content would undercut that encryption; an on-device model that never phones home the message itself does not.

Who can get it right now

• Platform: Android only. WhatsApp has not said when, or if, Scam Alert will reach iOS.
• Access: Limited rollout to select Android beta testers enrolled through the Google Play beta program — it is not yet available to everyone on the beta track, let alone the public release.
• Setup: Once it appears, the toggle lives under Settings > Account. It has to be switched on manually; there's no prompt forcing it on.
• Regions: No country or carrier restriction has been mentioned by Meta or the beta trackers that spotted it.

Meta has described this as an early, narrow test alongside its security research and bug bounty community, with production rollout to come later if the results hold up. No public release date has been set.

How this fits the wider scam-messaging problem

WhatsApp already lets you block and report unknown senders manually, but that requires spotting a scam before you engage with it. Scam Alert tries to do that recognition automatically, in the same spot Google has been building similar on-device protections into Google Messages for RCS spam. The difference here is the encryption constraint: because WhatsApp can't inspect message content server-side, the entire detection model has to run locally, which is also why the beta is starting so narrow.

It's a separate concern from account takeover, which WhatsApp addresses through its own two-step verification settings — Scam Alert protects what happens once someone messages you, not who can log into your account.

What to do if you're not seeing it

If you're enrolled in the WhatsApp Android beta and don't see a Scam Alert toggle under Settings > Account, you're likely not in the small slice of testers Meta has switched it on for yet — there's no update or setting that forces access early. Keeping the app current through the Play Store beta channel is the only thing you can do to be ready when the rollout widens.