WhatsApp Security Alert: Disable Automatic Downloads to Protect Your Phone from Malware

Cybersecurity experts are urging WhatsApp users to disable automatic file downloads to safeguard their devices against the increasing threat of malware and viruses. While convenient, this often-enabled feature can expose your phone to malicious content disguised as common files.

How Automatic Downloads Pose a Risk

WhatsApp’s automatic download function, typically activated by default, instantly saves photos, videos, audio files, and documents received in chats to your device without requiring user approval. This convenience, however, creates a vulnerability. Cybercriminals can exploit this feature to distribute malware by sending infected files camouflaged as harmless content, such as images or documents.

According to a January 27, 2026 report by Google’s Project Zero team, a WhatsApp vulnerability allows malicious media files to be downloaded without any user interaction Malwarebytes. This means simply being added to a group chat where a malicious file is sent can trigger a download and potential infection.

Potential Consequences of Downloading Malicious Files

Once a malicious file is downloaded, it could potentially install software capable of:

• Stealing personal data, including passwords and banking information.
• Granting remote access to your device.

The risk isn’t limited to unknown contacts. If a contact’s phone has been compromised by hackers, their account can be used to distribute harmful files to their entire contact list Malwarebytes.

How to Disable Automatic Downloads

Taking control of which files are saved to your phone is crucial. Here’s how to disable automatic downloading on both Android and iPhone:

Android

1. Open WhatsApp.
2. Go to Settings.
3. Select Storage and data.
4. Under Automatic file download, uncheck Photos, Audios, Videos, and Documents.

iPhone

1. Open WhatsApp and go to Settings.
2. Select Storage and data.
3. Change Automatic file download to the “Never” option.

Additional Security Recommendations

• Keep WhatsApp Updated: Regularly update the application to benefit from the latest security patches.
• Avoid Suspicious Files and Links: Exercise caution when opening files or clicking on links from unknown or untrusted sources.
• Protect Your Verification Code: Never share your WhatsApp verification code with anyone.

A recent lawsuit alleges that Meta, WhatsApp’s parent company, can access users’ private communications despite end-to-end encryption claims Malwarebytes. While the claims are being litigated, prioritizing your security settings remains essential.

Beyond WhatsApp: Staying Safe from Mobile Malware

In October 2025, Trend Micro identified a self-propagating malware campaign spreading via WhatsApp, targeting Brazilian users through ZIP file attachments Trend Micro. This malware, known as SORVEPOTEL, hijacks compromised WhatsApp accounts to send copies of itself to contacts, rapidly spreading the infection. This highlights the importance of vigilance and proactive security measures.

Small adjustments to your WhatsApp settings, combined with cautious online behavior, can significantly reduce your risk of scams and digital attacks. Prioritizing your digital security is a proactive step towards protecting your personal information and maintaining control over your device.