Outay, F., & Malik, H. (2025, March), WhatsPhish: WhatsApp AI Phishing Detector Chatbot
  Paper presented at 2025 ASEE North Central Section  (NCS) Annual Conference, Marshall University, Huntington, West Virginia. 10.18260/1-2--54698

\bibitem{asee_peer_54698}
  Outay, F., \& Malik, H. (2025, March), \emph{WhatsPhish: WhatsApp AI Phishing Detector Chatbot
}
  Paper presented at 2025 ASEE North Central Section  (NCS) Annual Conference, Marshall University, Huntington, West Virginia.
  10.18260/1-2--54698

Fatma Outay and Haroon Malik.  "WhatsPhish: WhatsApp AI Phishing Detector Chatbot
".  2025 ASEE North Central Section  (NCS) Annual Conference, Marshall University, Huntington, West Virginia, 2025, March.  ASEE Conferences, 2025.  https://peer.asee.org/54698 Internet.  12 Jun, 2025

\bibitem{asee_peer_54698}
  Fatma Outay and Haroon Malik.
  "WhatsPhish: WhatsApp AI Phishing Detector Chatbot
".
  \emph{2025 ASEE North Central Section  (NCS) Annual Conference, Marshall University, Huntington, West Virginia, 2025, March}.
  ASEE Conferences, 2025.
  https://peer.asee.org/54698 Internet.  12 Jun, 2025

@INPROCEEDINGS{asee_peer_54698
author = "Fatma Outay and Haroon Malik"
title = "WhatsPhish: WhatsApp AI Phishing Detector Chatbot
"
booktitle = "2025 ASEE North Central Section  (NCS) Annual Conference"
year = "2025"
month = "March"
address = "Marshall University, Huntington, West Virginia"
publisher = "ASEE Conferences"
note = {https://peer.asee.org/54698}
number = {10.18260/1-2--54698}
}

TY  - CPAPER
AB  - Phishing attacks continue to be a major worldwide cybersecurity concern, resulting in over $17 billion losses every year due to malware distribution, financial fraud, and credential theft. These attacks make conventional detection systems inadequate by taking advantage of human weaknesses and sophisticated escape strategies. Current solutions, like web security technologies like Google Safe Browsing and email phishing filters, have limited real-time reaction capabilities and do not address threats on popular encrypted messaging apps like WhatsApp, which has over 85% of the UAE's population. Furthermore, these systems frequently lack regionally unique datasets, which lessens their ability to detect phishing attempts that are culturally or linguistically specific.

We introduce WhatsPhish, a state-of-the-art real-time phishing detection system driven by OpenAI's GPT-4, to overcome these limitations. The core of WhatsPhish lies in its utilization of GPT-4, a state-of-the-art large language model, pre-trained on vast datasets and fine-tuned for phishing detection. This model is excellent at spotting context-specific phishing trends, differentiating subtle distinctions between malicious and legitimate content, and adjusting to emerging threats. We created a dataset of legitimate and phishing messages specific to the United Arab Emirates, including examples catered to regional linguistic and cultural behaviors, in order to improve regional relevance. The chatbot is further trained using this dataset, increasing detection precision and lowering false positives.
WhatsPhish operates through a secure and efficient workflow. When a user sends a message, the system decrypts it using Meta Developer tools while preserving user privacy. The decrypted content is analyzed by GPT-4 for phishing indicators, leveraging both the UAE-specific dataset and advanced Natural Language Processing techniques. For an additional layer of validation, any embedded links are analyzed through the VirusTotal API, ensuring comprehensive threat detection. Finally, the system generates an immediate, actionable response to inform the user of potential risks, all within the secure confines of the WhatsApp platform. Aligned with the UAE’s National Cybersecurity Strategy, WhatsPhish supports the nation’s vision of fostering a secure digital environment amid rapid transformation. With the TDRA prioritizing safe communication, WhatsPhish addresses cyber threats on essential platforms like WhatsApp, offering intuitive tools for non-technical users and the elderly. By tackling localized phishing risks and leveraging AI for proactive threat detection, WhatsPhish contributes to the UAE’s leadership in secure digital transformation and AI-driven innovation, reinforcing trust in digital ecosystems.
AU  - Fatma Outay
AU  - Haroon Malik
CY  - Marshall University, Huntington, West Virginia
DA  - 2025/03/28
PB  - ASEE Conferences
TI  - WhatsPhish: WhatsApp AI Phishing Detector Chatbot

UR  - https://peer.asee.org/54698
DO  - 10.18260/1-2--54698
ER  -