WhatsApp’s blocking functionality has not been working as intended since last week. Blocked contacts are able to view profile pictures and last seen timestamps of users due to a server-side back. Reports have also come in which suggest blocked WhatsApp users are now able to message the people who blocked them as well in cases.
The security flaw is yet to be acknowledged by the WhatsApp team, and they are trying to resolve the issue as soon as possible. A temporary fix is available to all users which involves deleting the blocked contact from your Phonebook. Users need to configure Privacy Settings on the Contacts page and manually mute the blocked contact after deleting the number from the phone address book.
It looks blocked contacts might sometimes be able to see your profile picture and last seen. It really seems a server side bug.
I recommend you to remove the blocked contact from your Address Book, to configure Privacy Settings on “My Contacts” and mute the blocked contact’s chat— WABetaInfo (@WABetaInfo) May 23, 2018
Earlier today, WhatsApp rolled out their latest update to address other privacy issues, but it did not include a fix for the malfunctioning blocking feature. The new update version 2.18.60 has rolled out for iOS and will be hitting Android devices soon. Users will get access to a new ‘Request Account Info’ option which allows users to see what information is collected by WhatsApp from their respective accounts from the ‘Account’ tab in the Settings menu.
It takes three days for reports to come in once a request has been made by users. If users change their number or delete their WhatsApp account, the request will automatically be canceled until it is initiated again which will reset the process. However, if a user changes devices and ports an account to a different device, the report will still remain valid and will be delivered to the new device. The latest changes were made to ensure WhatsApp complies with the latest GDPR regulations that are going into effect under the European Union following the Facebook and Cambridge Analytica data breach scandal.