What is Signal and how secure is it?
Signal is a free, open-source messaging app that’s been around since 2013 and is widely regarded as one of the most secure messaging platforms. Developed by an independent non-profit, it has no incentive to collect or sell user data for profit. Its built-in protections, including default end-to-end encryption, disappearing messages, and PIN protection, help keep conversations private.

But technical safeguards can’t block every threat. Many modern scams rely on social engineering, which relies on deception and manipulation. These tactics allow fraudsters to bypass Signal’s strong security protocols and exploit the human side of communication, turning a private, protected space into an opportunity to commit cybercrime.
Why scammers target Signal users
Signal’s popularity has soared thanks to its strong privacy protections and growing skepticism of Big Tech platforms like Meta and Google, whose business models often rely on data collection and tracking. For many users, Signal represents a safer, more private way to communicate.
But as the app’s user base grows, it becomes a richer hunting ground for fraudsters. And end-to-end encryption, disappearing messages, and limited data collection benefit legitimate users — but they also give scammers cover, making it harder to trace or report abuse.
Ultimately, scammers don’t need to hack Signal’s security — they exploit people instead. Social engineering tactics like impersonation, fake investment schemes, and phishing messages can bypass technical safeguards. And this isn’t unique to Signal, similar scams are common on WhatsApp, Telegram, and other messaging apps.
Common types of Signal app scams
Many different types of scams can be found on Signal. We’ll review the most common types of Signal app scams below, along with the warning signs to watch out for.
Fake employment offer
A common Signal scam involves fake job offers. Scammers pose as recruiters and dangle roles that are remote, high-paying, and require minimal hours. These unsolicited offers often come with requests for personal details or upfront payments for job materials or equipment.
Signs of a fake employment offer:
-
Unsolicited offers
-
Minimal or no interview process
-
Pay and hours that sound too good to be true
-
Requests you pay for job materials or equipment
To protect yourself, always verify the sender and research the company to confirm the role is real. Legitimate recruiters never ask candidates to pay fees or provide sensitive information before a contract is signed.
Romance scams
Romance scams on Signal work much like they do on other dating or messaging apps. Scammers create fake profiles, build emotional connections with victims, and use tactics like “love bombing” to quickly gain trust. Once the victim feels invested, the scammer begins asking for money or sensitive information under the guise of a believable story.
Signs of a romance scam:
-
Excessive flattery or “love bombing” early in the conversation
-
Excuses for why they can’t meet in person (commonly claiming to be in the military, working on an oil rig, or living abroad)
-
Repeated requests for money, often tied to urgent or emotional stories
-
Disappearing or cutting off contact if money isn’t sent
If you spot these red flags, stop communicating, avoid sending any funds or personal details, and report the account.
Phony giveaways and fake prizes
Fake giveaways are a persistent scam tactic on Signal and other platforms. You might receive an unsolicited message claiming you’ve won a prize or inviting you to join a contest with rewards that seem too good to be true. The catch? You’ll be asked to hand over personal information or pay a fee to claim your “winnings.”
Signs of a fake giveaway scam:
-
Claims you’ve won a giveaway you never entered
-
Prizes that sound unrealistic or overly generous
-
Requests for payment or sensitive information to claim your prize
Common items offered in giveaway scams include large amounts of money, luxury items, and cars. If a giveaway sounds too good to be true, it almost certainly is.
Customer support fraud
In customer support scams, fraudsters pose as tech support or customer service agents, claiming there’s an issue with your device or account. They create urgency to stop you from questioning their instructions, which usually involve handing over sensitive data or sending money.
Signs of a customer support scam:
-
Unsolicited contact through Signal (a platform legitimate companies rarely use for customer service)
-
Pressure to act immediately
-
Requests for money or sensitive personal information
To verify support contacts, always start by checking the company’s official website and URL. Look up unknown phone numbers to confirm they’re legitimate, and remember that real companies won’t call you unexpectedly about account or computer issues you didn’t report.
Wrong number scams
A wrong number Signal scam starts with a message clearly not meant for you. If you respond to say they have the wrong number, instead of ending the exchange, the scammer continues chatting to build rapport. Over time, they may push you toward sending money — often in cryptocurrency — for a fake investment opportunity or pressure you to share personal details.
Signs of a wrong number scam:
-
A random message from an unknown number
-
Attempts to engage in conversation despite apparently having the wrong number
-
Requests for money or personal information
If you receive one of these messages, the safest response is no response at all — block and report the number immediately.
Investment fraud
Investment fraud is another scheme favored by scammers on Signal. They pose as financial advisors or brokers, often claiming to work with legitimate-sounding firms, and entice victims with promises of high returns and minimal risk. They typically insist on payment through untraceable methods like cryptocurrency — and once the money is sent, the scammer vanishes.
Signs of investment fraud:
-
Promises of unusually high returns with no risk
-
Pressure to act quickly and invest before you “miss out”
-
Requests for payment in cryptocurrency
Remember: no legitimate advisor can guarantee profits. Any promise of guaranteed returns is a clear red flag and a strong sign of a scam.
Malicious QR codes
An emerging scam on Signal exploits the app’s “linked devices” feature, which uses QR codes to connect your account across multiple phones or computers. Hackers generate fake QR codes that, once scanned, may redirect you to malicious websites or even give them access to your Signal account, letting them spy on your chats.
These bogus QR codes are often disguised as security alerts, group invitations, or pages mimicking Signal’s official site. They can also appear on phishing websites outside the app.
Signs of a fake QR code scam:
-
The code links to a suspicious or unfamiliar URL
-
It comes from an untrusted or unexpected source
-
The message uses urgency to pressure quick action, such as “Scan now!”
If you encounter a QR code from an unverified source, don’t scan it. Always generate device-linking codes directly from within the Signal app.
How to protect yourself from Signal scams
Scammers use many different tricks, but the steps to safeguard yourself stay the same. By learning how to recognize red flags and taking a few simple precautions, you can use Signal with confidence while keeping your personal information secure.
Follow best practices for secure communication
Firstly, it’s important to follow best practices for secure communication. While Signal’s end-to-end encryption and privacy features provide strong protection, your security also depends on how you use the app.
Here are some best practices for more secure communication on Signal:
-
Only chat with verified contacts and never share sensitive information with untrusted accounts.
-
Enable disappearing messages to limit how long your conversations remain accessible.
-
Verify contacts using Signal’s safety number to confirm you’re speaking with the right person.
-
Lock the app with a PIN to prevent unauthorized access.
-
Avoid clicking suspicious links or sharing sensitive details in messages from unknown sources.
Recognize red flags in messages
Scam messages almost always reveal themselves with warning signs. Learning to spot these red flags can help you avoid Signal app scams and keep your money and personal information safe.
Telltale signs of a scam message include:
-
Unsolicited messages from unknown numbers
-
Job offers or investment opportunities that seem too good to be true
-
Pressure to act immediately
-
Embedded or shortened links
-
Poor grammar and spelling
-
Generic, copy-paste style messaging
Protecting yourself from Signal scams starts with caution. Always verify a sender’s identity through trusted channels and avoid clicking unexpected links or downloading attachments. If a message seems suspicious, don’t engage — block the number and report it immediately in Signal. Cutting off contact quickly is the simplest and most effective defense.
Use an antivirus for added protection
While Signal is highly secure, its protections can’t prevent human error, which is often where vulnerabilities appear. Adding automated safeguards, such as tools that detect and flag suspicious messages, phishing attempts, or potential malware, can provide an extra layer of defense and help prevent scams before they reach you.
Avast Free Antivirus now comes with an AI-powered Scam Detector tool, which flags suspicious messages and guides you with clear next steps, while real-time protection blocks viruses and malware before they reach you. Trained on millions of data points to pinpoint hidden scams, Avast delivers around-the-clock security that’s powerful, effortless — and free.
What to do if you’ve been scammed on Signal
Realized you’ve been scammed on Signal? Read on to find out what to do to report, stop, and help prevent future scams on the app.
Report the scam
You should report scams on Signal both to Signal support and, if it involves financial loss or identity theft, to the authorities. While this won’t always recover lost money or catch the scammer, it can help prevent others from becoming victims.
Reporting scams to Signal Support
Here’s how to report scams to Signal support:
-
Open Signal, select the chat with the scam user, and tap their name at the top of the chat.

-
Scroll down and select Report Spam.

This flags the account linked to that phone number, allowing Signal to review it and block fraudulent profiles.
Reporting scams to the authorities
Here’s how to report scams to the relevant authorities:
-
Gather evidence: Take screenshots of chats, call logs, or payment records that document the scam.
-
Contact law enforcement: Contact your local law enforcement or cybercrime unit to make an official report.
-
Report to the FTC: File a complaint with the FTC at ReportFraud.ftc.gov. The FTC shares these reports with law enforcement agencies nationwide.
-
Contact other relevant authorities: If the scam involves identity theft, report it at IdentityTheft.gov. If any transactions were involved, notify your bank or credit card provider.
Always preserve messages and screenshots before deleting them. Clear documentation strengthens your case and may help authorities stop the scammer from targeting others.
Secure your device and accounts
If you’ve fallen for a Signal scam, it’s important to act quickly to ensure your device and accounts are secured. Start with a full malware scan to confirm your device is clean. Then strengthen your defenses by using a random password generator to create strong passwords and two-factor authentication (2FA) to reduce the risk of your accounts being compromised.
It’s also a good idea to set a PIN on Signal, enable the registration lock feature to stop unauthorized re-registration, and regularly verify safety numbers to confirm your contacts. And, as always, take care to steer clear of apps or files from untrusted sources, and use reliable antivirus software to block viruses and other malware while keeping your device protected.
Help protect your device from Signal app scams
Don’t let scammers exploit your Signal conversations — or any part of your digital life. Avast Free Antivirus gives you powerful AI-powered protection against phishing and other scam messages, as well as real-time defenses against malware and other hidden threats, to help your devices and data stay secure. Take back control of your security and privacy today.