Theft of Whatsapp API keys/tokens

Build better loan database with shared knowledge and strategies.
Post Reply
asimj1
Posts: 155
Joined: Tue Jan 07, 2025 4:50 am

Theft of Whatsapp API keys/tokens

Post by asimj1 »

Malware infection on user devices (if the bot prompts for downloads).
Pushback against Truecaller's official app: Some Reddit threads also show users expressing frustration with Truecaller's "forceful nature" regarding permissions or aggressive ads, leading them to seek alternatives, including the unofficial Whatsapp bots. (r/IndiaTech, 2 months ago).
In essence, Reddit discussions around "Truecaller bot Whatsapp " reflect a user base trying to navigate the utility of caller ID services with significant privacy and security concerns. While some panama whatsapp number data embrace unofficial bots for perceived privacy benefits over the official app, a strong cautionary voice on Reddit emphasizes the inherent risks of these unregulated third-party solutions.


"Mobile Hidden" Means Hidden: If you try to view a user's profile and see "Mobile hidden" under their phone number section, it means they have explicitly set their privacy to prevent others from seeing their number. There is no built-in Whatsapp feature or official method to bypass this.
Privacy Settings for Phone Number: Whatsapp offers robust privacy controls for phone numbers. Users can choose who can see their number:
"Everybody": Anyone can see it.
"My Contacts": Only people in their phone's contact list (who are also on Whatsapp ) can see it.
"Nobody": No one can see it.
They can also control "Who can find me by my number" (either "everybody" or "your contacts") even if the number itself is hidden.
News from early 2024 (e.g., Bitdefender) continued to highlight these privacy settings as a core feature for user control.
No API Access for Hidden Numbers: The Whatsapp Bot API does not provide a way for bots to retrieve a user's hidden phone number. Community discussions (like on Latenode or Stack Overflow as recently as April 2025) consistently confirm that bots can only get a phone number if the user explicitly shares it via a "request contact" button.
Post Reply