Fake WhatsApp/Telegram business verification phishing — account requires verification or will be suspended + click link to confirm phone/identity + sender is never whatsapp.com or telegram.org + designed to harvest phone numbers, government IDs, passwords
fake-whatsapp-telegram-business-verification-phish
What this tier means
High-confidence threat indicator — phishing, impersonation, BEC, or scam pattern. Strong contributor to the trash decision.
How Gorganizer detects this
WhatsApp and Telegram impersonation phishing for account takeover — a growing credential-harvest threat exploiting the popularity of these messaging platforms for business communication. Scammers send emails (not messages) falsely claiming to be from WhatsApp Business or Telegram, warning that the recipient's account has been flagged for unusual activity, requires verification to avoid suspension, or is eligible for a "verified badge" (green tick). The links lead to credential harvest pages designed to steal phone numbers, OTP codes, passwords, or in more sophisticated variants, government ID documents for identity fraud. Key facts: (1) Real WhatsApp security communications come only from @whatsapp.com — any other domain is fraudulent; (2) Real Telegram security communications come from @telegram.org — any other domain (e.g., telegram-account-verify.net) is fraudulent; (3) Meta (WhatsApp) never contacts business users by cold email to demand identity verification — account issues are handled within the WhatsApp Business app itself; (4) The WhatsApp Business "green tick" verification is applied by Meta after reviewing the business profile — it is free and never requires a verification fee paid via email; (5) Telegram has no email-initiated verification process — all Telegram account actions happen within the app. Warning signs: non-official sender domain, urgent suspension threat, government ID requested, verification fee mentioned.
False-positive guard
Every signal in Gorganizer feeds a multi-module score — never a sole verdict. This is a threat-tier signal — it adds a strong contribution to the trash score. The full pipeline still requires convergence across multiple modules + a margin over the safety floor before deletion happens, and Gmail's trash (30-day recovery) is always used — never permanent delete.
About the scoring engine
Gorganizer's scoring engine emits 2,143+ signals across six modules — headers, sender, subject, body, attachments, and structural metadata. Every email is scored by every module independently; the final verdict requires multiple modules to agree and the trash score to beat the safety floor by a margin.
Sacred safety guards — never delete starred emails, replies, calendar invites, receipts/invoices, or attachments — apply unconditionally regardless of any signal.
Ready to clean your inbox?
Gorganizer scans your Gmail with this signal and 2,143+ others, then cleans everything in one click. $4.99 one-time, no subscription.
Get started