Pretenders, Pegasus, and Privacy: What You Need to Know This Week
A quick guide to this week’s privacy headlines—and how to protect yourself.
Ever gotten a sketchy message from your “mom” asking for your bank details, only to realize it's probably a scammer in a hoodie somewhere? Welcome to the digital jungle—where privacy headlines often sound more like rejected Netflix scripts than news.
This week, the big stories feature spyware payouts, a government official duped by a Signal knockoff, and scammers perfecting their impersonation game. The stakes? Your data—which, in case you missed the memo, is now everyone’s favorite currency.
Let’s break down what actually happened and what you can do to stay ahead.
NSO Group Owes ~$168 Million to WhatsApp: Is It Secure Enough?
Back in 2019, the spyware company NSO Group—yep, the folks behind Pegasus—hacked around 1,400 WhatsApp users, including journalists and activists, by exploiting a (now-fixed) vulnerability. A U.S. court just hit them with a $168 million bill.
Is WhatsApp still secure?
Mostly. It has end-to-end encryption, but that won’t help if your phone itself is compromised. Pegasus didn’t break the encryption—it just waltzed in and read your messages before they were locked up.
But is WhatsApp truly private?
Not quite. While your messages are encrypted, WhatsApp (a Meta product, lest we forget) still collects metadata—like who you talk to and when. It’s like locking your diary but telling everyone how often you write in it and with what pen.
So what’s the real privacy issue?
Data collection. Your contact list, device info, and usage patterns are all on the table. Meta says it’s for improving service. Skeptics call it targeted advertising dressed as customer care.
Can people see my personal info on WhatsApp?
Yes—unless you’ve changed your settings. By default, strangers can view your profile picture, last seen status, and about info. Not exactly Fort Knox.
How to make WhatsApp more private
Go to Settings > Privacy and restrict who sees what.
Turn off cloud backups—or if you keep them on, make sure end-to-end encryption for backups is enabled in your settings.
Disable read receipts if you prefer lurking in peace.
Bottom line: WhatsApp isn’t terrible, but if you want real privacy, Signal might be your next move.
Signal Remains Unwavering (Just Avoid the Bootleg Version)
Here’s the short version: A former Trump official thought he was using the ultra-secure Signal app. Turns out, it was a rebranded knockoff called TM Signal—an altered version used by government staff. That version, created by a company named TeleMessage, secretly stored messages in plaintext on remote servers.
So no, Signal itself wasn't hacked. But this incident proves how easy it is to mess things up with the wrong version of the right tool.
Signal vs. WhatsApp: The Privacy Matchup That Actually Matters
Signal collects almost nothing. No contact lists, no message logs, no creepy tracking. It’s like the privacy-conscious friend who deletes their texts after sending them.
WhatsApp may encrypt messages, but it stores metadata—so it knows who you’re talking to and when. Think nosy roommate with a notepad.
Bottom line: If you’re serious about privacy, stick to the official Signal app and leave the bootlegs to spy novels.
Impersonation Scams Are Getting Scary Good
Impersonation scams are booming. Someone pretends to be your boss, your bank, or your grandma having a meltdown—and they want your money or personal info, fast. And honestly? Sometimes they sound very legit.
How to Recognize a Fake
If a message feels overly urgent, slow down. Scammers thrive on panic.
Watch for weird wording or slightly off spelling. If your “mom” suddenly calls you by your full name, pause.
Never click on shady links or open surprise attachments.
Confirm the request using another method—call, text, whatever.
Turn on two-factor authentication. Yes, it’s annoying. Yes, it works.
Takeaway: Trust, but verify. Especially if your grandma suddenly wants a Venmo loan for a water heater.
Tips to Stop Impersonation Scams Before They Start
Protect your accounts: Use a password manager to generate and store long, complex passwords you don’t have to memorize. Make sure every account has its own unique password—reusing one is like having a single key for your house, car, and office. If one gets stolen, they all do.
Limit what you share: The more you post online—photos, job details, family connections—the more material scammers have to impersonate you or someone close to you. Keep your social profiles tight and think twice before broadcasting your life to the world.
Teach your circle: Help your friends and family recognize common red flags, like urgent money requests or suspicious links. A quick heads-up today could save someone a big headache tomorrow.
Report it: If you receive a scam message, don’t just delete it—report it to the app or platform you’re using, and consider filing a complaint with your local consumer protection agency. Reporting helps stop the scam from spreading and protects others who might not spot the red flags as quickly.
What to Do If You’ve Been Scammed
Move fast: Change your passwords immediately.
Contact your bank: They may be able to reverse transactions.
Enable fraud alerts: Let credit bureaus know.
Report it: File a report with the FTC or your country’s cybercrime unit.
You’re not alone. Getting scammed sucks—but reacting quickly can limit the fallout.
Build Your Own Fortress of Privacy
Staying private online isn’t about living off the grid. It’s about making smart choices. You don’t have to toss your phone into a lake—but you should be picky about the tools you use.
My Privacy Toolset
This list contains apps I use daily and highly recommend based on my testing and experience. I will update this page when something changes on my end.
Final Word
This week’s chaos proves that even “secure” platforms can stumble—and scammers are just getting better at being awful. But with a few smart moves, you can become a giant pain in the butt to anyone trying to snoop on you.
And in this case? Being annoying is a superpower.
Stay sharp. Stay private.