The National Cyber Emergency Response Team (National CERT) of Pakistan has issued a critical advisory highlighting an alarming increase in social engineering attacks disguised as freelancing job opportunities.
The scams, spreading mainly through messaging apps like WhatsApp, involve fraudsters luring individuals, particularly youth, students, and freelancers, into groups where they are subjected to explicit content, coercion, and ultimately, blackmail.
These schemes have been categorized as “honey trap” scams and are reportedly growing in frequency, particularly across Punjab.
According to the National CERT, attackers pose as recruiters or agents of legitimate freelancing platforms and add potential victims to seemingly professional WhatsApp groups. These groups often include fake participants to build a sense of legitimacy. Once inside, victims may be exposed to obscene content.
Those who react or attempt to report such material are then manipulated into forwarding it, unknowingly implicating themselves. Subsequently, individuals are contacted by impersonators posing as law enforcement officials, who threaten legal action unless large sums of money ranging from Rs. 1-1.5 million are paid.
The advisory outlines the multifaceted risks posed by these scams. In addition to financial extortion, victims suffer from emotional distress, reputational harm, and the unauthorized use of their digital identities. Attackers exploit social media activity, WhatsApp display pictures, and usernames to personalize their attacks.
The impact extends beyond individuals to their families and professional networks, making the threat both a cybersecurity and social risk.
According to the advisory, a combination of technical vulnerabilities and user behavior contributes to the success of these scams. Public exposure of personal information in group chats, the ability to be added to groups without consent, and a general lack of awareness about digital safety are identified as common weaknesses.
Many users, especially young job seekers, engage with unsolicited job offers through informal platforms rather than verified freelancing websites, which increases their susceptibility.
The National CERT recommends several preventive measures. Users are urged to adjust their privacy settings on messaging platforms, avoid engaging with unknown job offers, and leave any group immediately if exposed to explicit content. Sharing or reacting to such material, no matter the intent, should be strictly avoided.
The advisory emphasizes using only reputable freelance platforms, promoting cyber hygiene, and seeking legal guidance when necessary.
A copy of the advisory has been circulated to law enforcement agencies, digital platforms, and concerned institutions. Victims or witnesses of such scams are encouraged to report incidents through the National CERT portal, the PTA complaint system, or the National Cyber Crime Investigation Agency.