Firms have paid out more than $2.5 billion since December 2021 for the misuse of unofficial communications channels like WhatsApp.