Waegy Scam: The WhatsApp “Earnings” Portal That’s Actually Hijacking Your Account

Since early July 2025, a new scam operating under the name Waegy (using domains like a1.waegy.com) has taken root across South African social media networks.

Promising “extra income” through WhatsApp tasks and promotional activity, this scheme is the latest in a series of digital cons targeting South Africans under the guise of effortless online work.

On its face, the scam appears harmless—even enticing. Participants are told they can “earn” by staying active on WhatsApp, with supposed payouts every 24 to 48 hours. Screenshots shared by recruiters show withdrawals of R30, R100, and even R400, all designed to add an air of credibility. Recruitment messages typically follow a predictable format: “Ask me how,” “Come this side, we’re eating,” or “I’ll inbox you the link.” Many claim it’s free to join, implying there’s no risk.

See more of our coverage in your search results.

Add Political Analysis South Africa on Google

But the risk, in fact, is monumental.

Cui Bono? The Foundational Question of Every Scam

“Cui bono?”—a Latin phrase meaning “to whom is it a benefit?”—is the right question to ask. Because beneath the glitzy frontend and mocked-up withdrawal screenshots lies a deeply invasive, highly dangerous scam.

Here’s what’s really going on.

How the Scam Works

To “sign up,” users must link their WhatsApp number and create an account on the a1.waegy.com portal. That includes providing an email address, creating a password, and entering a code sent from admin@mail.wasdk.com (yes, the email itself is from an unrelated, suspicious domain).

That may seem harmless at first. But what you’ve done, in that moment, is:

1. Link your WhatsApp to their platform, likely via QR-based web login or device pairing—granting them continuous background access.
2. Hand over your email, which is now verified through a phishing-style mechanism.
3. Set a password, which in most cases, is the same one users reuse across email, social media, and even banking logins.

And all of this happens on a domain that is barely two months old. The primary waegy.com domain was registered on 19 May 2025 via Gname.com, a notorious registrar associated with numerous scams. The related wasdk.com domain—used for the scam’s email verification—was registered on 27 December 2024, using Alibaba Cloud as registrar, another red flag due to its historic associations with fraud networks.

None of these domains are registered businesses in South Africa. A full check of the CIPC registry confirms that no company named Waegy—or any plausible variation thereof—exists in the country.

What’s the Real Cost?

The illusion of income—what one might call the “loss leader” of the scam—is simply bait. The true value to the scammers is the wholesale harvesting of digital identities and access credentials.

Already, multiple participants report that their WhatsApp accounts have been disabled by Meta for spam or unauthorised activity. This is likely due to the fact that scammers are sending bulk messages, spam, or even scam content using their accounts in the background. Others have experienced full compromise of their PayPal accounts—which, for many users, are also linked to their WhatsApp numbers.

Consider the below user comment (translated from isiXhosa):

“Ndavuka PayPal ukhala umoya, WhatsApp ublockiwe. Ndisagowa nangoku.”
(“I woke up to PayPal being empty, WhatsApp got blocked. I’m still struggling now.”)

Another user commented:

“Her WhatsApp uyaquleka [is collapsing] ever since she did that thing…”

These aren’t coincidences. This is the scam working—just not in the way participants hoped.

Look Closer at the “Earnings” Model

A review of the a1.waegy.com user interface tells you everything you need to know. There are four earning categories listed:

• WhatsApp Online
• Team Bonus
• Activity Income
• Other

The real takeaway? Everything revolves around keeping your WhatsApp account logged in, and building a referral network that feeds more users into the trap. Any payments that do go through are isolated and strategically done to create the impression of legitimacy—just enough to keep the scheme viral.

It’s a numbers game. Recruit 1,000 users. Pay 30 of them. The other 970 keep trying, stay logged in, stay vulnerable—and never see a cent.

Digital Security at Risk

Even worse, the fact that Waegy’s system requires you to click a link from mail.wasdk.com to verify your email is a likely vector for long-term email compromise. This opens the door to further phishing attempts, takeover of social accounts, and unauthorised financial activity.

And unlike many previous scams targeting South Africans, this one is slicker. It’s more technical. It masks its mechanics under a “task and earn” model but is really a platform for mass credential harvesting.

The Final Verdict

Waegy is not an opportunity. It’s a risk.

A sophisticated data-harvesting scam masked as an income-generating WhatsApp-powered platform, Waegy relies on the desperation of South Africans facing sky-high unemployment. And in return for a handful of rand paid to a select few users, it compromises the emails, WhatsApps, and even financial platforms of hundreds—if not thousands—of others.

If you’ve already signed up:

• Unlink your WhatsApp from all devices immediately.
• Change your email and app passwords—especially if you reused them.
• Check your PayPal, banking, and email account for suspicious activity.
• Monitor for logins or password resets you didn’t initiate.

This isn’t just about avoiding scams. It’s about preserving your digital life. Never forget: if something is free and promises passive income, you are the product—or worse, the bait for others. And if something pays you for doing nothing, the real cost is something you don’t see yet—but it’s far greater than a few rand.