The "Hi Mum" WhatsApp Scam and How to Stop It Cold

"Hi Mum, I broke my phone. This is my new number, please save it." From an unknown number, over WhatsApp or plain text, begins one of the cruellest scams running today: the stranded-child con. There is no malware and no sophisticated hacking. Just a stranger pretending to be your son or daughter, and an urgent money request that lands once you already believe you are talking to family.

It is worth understanding properly, because the script is always the same — and once you know it, it is almost impossible to fall for.

How the scam unfolds

The scammer sends the same opening message to thousands of random numbers. They do not know whether you have kids, what their names are, or anything about you. That is why the first message is deliberately vague: "Hi Mum" or "Hi Dad", with no name. If you reply with something like "Emma, is that you?", you have just handed over the name. From there, "Emma" writes back with total confidence.

The conversation follows a well-rehearsed pattern:

1. The new-number excuse. "I dropped my phone in water" or "it was stolen, this is a temporary one." It explains why they are writing from an unknown number — and why they cannot call you or send voice notes ("the mic doesn't work", "almost no battery").
2. A few warm-up messages. They ask how you are, drop something generic, use emojis. They ask for nothing yet. The goal is to get you relaxed and assuming this is your child.
3. The emergency. The problem arrives: a payment must go out today (rent, a bill, a purchase that "gets cancelled if I don't pay now") but they cannot access their bank because the app was on the broken phone and recovery takes days.
4. The ask. They want you to send the money — a transfer or a payment app — "and I'll pay you back as soon as I get my banking back." The amount is believable: a few hundred in any currency. And here is the key detail: the destination account is not in your child's name, but in a "friend's" or the supposed company's. If you pay, a second request almost always follows.

Why it works so well

Because it does not attack your intelligence — it attacks your emotions. The mix is powerful:

• Emotion. It is your child in trouble. The instinct to help fires before analysis does.
• Urgency. Everything must be solved now. The rush is engineered so you never stop to think or verify.
• Plausibility. Breaking a phone, losing banking-app access, asking parents for a quick favour — none of this is strange. They are not asking for anything absurd; they are asking for something a real child might ask.

Messaging also plays in the scammer's favour: we are used to treating a written message as "being" the person. And if they previously hijacked your child's real messaging account, the scam can even arrive in the usual chat. The defence is the same in both cases.

Concrete warning signs

No single sign proves anything on its own, but two or more together should set off every alarm:

Pay special attention to the refusal of voice. It is the constant of this scam: text is easy to fake; a real-time conversation with your child is not.

The check that never fails

Faced with any message like this, before moving any money, do one thing: call your son's or daughter's usual number. The lifelong one, the one saved in your contacts. In most real cases your child answers from their usual number, completely unaware of everything, and the scam collapses in ten seconds.

If they do not answer, you have more options — all better than paying:

• Ask for a voice note to the new number: "send me a voice message and I'll make the transfer." The scammer will make excuses; a real child sends it without thinking.
• Ask a control question only your family could answer: the first pet's name, where you vacationed last year, what you call your child at home. Nothing guessable from social media.
• Verify another way: message the old number, contact their partner, a sibling, a roommate.

The underlying rule is the same as with bank-impersonation fraud: the valid verification is the one you start, over a channel you control. An unknown number writing to you and rushing you is not a trustworthy channel, no matter how many "mum"s it uses.

What to do if you already paid

Act fast, in this order:

• Call your bank immediately on the official number (the one on the back of your card). Explain you are a scam victim and ask them to try to hold or reverse the transfer. With instant payments the window is small, but reporting within the first minutes makes a difference.
• Save all the evidence: screenshots of the full conversation, the number that wrote to you, the transfer receipt, the destination account.
• Report it to your national fraud reporting centre and the police, with those screenshots — a report is usually required for any later claim to the bank.
• Report the number to your carrier and publicly, so the next parent who receives the message finds a warning instead of an empty search.

Protect your family in advance

This scam aims mostly at parents of adult children living away from home. The best vaccine is telling them the script before it arrives: explain the pattern ("hi mum, broken phone, new number, urgent transfer") and agree on a simple family rule: nobody in this family asks for money in writing; anyone who does gets a call to their usual number before anyone pays. You can even agree on a family code word for real emergencies.

The bottom line

The scammer knows nothing about you: you supply the name, the trust, and the money. Their only tool is a script mixing emotion, urgency, and a plausible story. Your only necessary defence costs one phone call: to the usual number, before paying anything. No voice, no transfer.