You may have seen some references on our site to annual licensing or renewals.
All plugins currently come with a lifetime license, no matter what the site says.
We’re currently running tests before we make the switch to annual pricing. Check the Discounts tab to purchase our other plugins and get a lifetime license before they’re gone.
As the file circulated, Spanish authorities began tracking the digital breadcrumbs. The story took a dramatic turn when police arrested over 100 individuals across Spain linked to these coordinated WhatsApp frauds. The operation revealed that many of these scammers weren't professional hackers but individuals managing dozens of simultaneous deceptive conversations as if they were texting friends.
Across the country, thousands received a similar message. "Mama, my phone is broken, I’m using a friend's. I need help urgently." This "friend or family in trouble" scam became the file's primary weapon. In one wave alone, scammers in Spain managed to rake in over €1,000,000 by convincing worried parents to send continuous payments to "new" accounts. Spain_102K_Whatsapp.xlsx
The "story" of this file begins with a silent scrape—a bot-driven harvest that bypassed privacy settings to collect active phone numbers, profile names, and even status updates. For the people on that list, the first chapter of the story didn't start with a headline, but with a ping. As the file circulated, Spanish authorities began tracking
The file was unassuming, tucked into a sub-folder of a dark web forum and titled with cold, clinical precision: Spain_102K_Whatsapp.xlsx . To a casual observer, it was just another spreadsheet. To the digital underworld, it was a master key to 102,000 lives across Spain. Across the country, thousands received a similar message
Today, Spain_102K_Whatsapp.xlsx serves as a cautionary tale in cybersecurity. While WhatsApp has since worked to close the "enumeration flaws" that allowed such large-scale data collection, the thousands of individuals whose numbers remain in that spreadsheet are still targets for phishing and "smishing" attacks. For them, the story isn't over—it's a persistent digital shadow.