Scammers are now targeting you via FaceTime.
If you regularly receive scam calls and text messages, you know that not all scammers take the same approach. A recent CBS report found that thieves are posing as bank representatives to trick people into answering FaceTime calls to “verify” their bank accounts, then stealing their bank information.
These programs work because fraudsters know how to ignore people’s concerns, Justin Brookman, director of technology policy at Consumer Reports, tells CNET. “They are creating a false sense of urgency to make you take action quickly or a disaster will happen,” he said.
FaceTime scammers are reported to first send a phone call or text message that says it’s an urgent bank account or credit card alert that needs your attention. A number is included in the message that you are expected to call to contact the scammer. During the call, the scammer may ask for additional verification and tell you to answer the FaceTime video call. FaceTime video allows scammers to trick you into sharing your screen, and, in the process, steal your passwords, account numbers and more.
Victims of this scam have come forward via Reddit threads, and even CBS news reporter Matt Gutman posted on X about how he fell for the scam. John Breyault, vice president of public policy, communications and fraud at the National Consumers League, tells CNET that all scammers need a small percentage of people to respond for these efforts to be profitable, and video calling is one way to deter a victim.
“Video conferencing has grown in recent years, and we’ve seen a lot of reports, especially about computer spoofing in places like Southeast Asia, with elaborate sets to make it appear that the person FaceTiming is who they say they are,” Breyault said.
In the age of AI, it is easy to impersonate someone as there are tools that can deepen the illusion of audio and video, making a convincing video call.
“Because of all the information available to us today, combined with AI tools, attackers can easily fine-tune and personalize their attacks to the extent that they make them seem realistic,” Brookman said.
FaceTime scam red flags
If you’re contacted out of the blue about your bank account or credit card being compromised and you’re not sure if you can trust the message, there are red flags to look out for:
- The bank will not ask you to FaceTime you: A trusted agency will never try to call you if there is a problem with your account. “The way consumers should handle it when they get these types of suspicious requests is to not respond and call the number on the back of your credit or debit card,” Brookman said. That way, you can confirm with confidence if something needs to be addressed with your account.
- Don’t click on links or call numbers you don’t know: If you’re directed to a scam-related text message that includes a link or a number to call, it’s best to ignore it. “Instead, you should search online for the appropriate customer service number or website of the bank or provider you think is at risk,” Brookman said.
If you find yourself the victim of a scam
While you can do everything to protect yourself from scammers, there is always the chance to let your guard down. If you find yourself the victim of a FaceTime scam, there are steps you can take immediately to protect yourself.
Immediately call your bank or financial institution
Breyault recommends immediately reaching out to the company for an account in jeopardy. “Although fraudsters often act quickly to try to withdraw money, especially bank accounts, contacting your bank can often help them take steps to prevent interference,” he said. In some cases, consumers may receive funds, but it depends on how quickly the attack is reported.
Use your phone’s security features
Know what security features your smartphone has to prevent fraud. “Consumers using iPhones should know that they can mute FaceTime calls from anyone outside of their contacts,” Breyault said. If someone not on your whitelist tries to video call you, it will go straight to your history without your phone ringing.
Report spam messages
If you have an iPhone, don’t forget that you can report any spam messages you receive. The same applies if you receive fake FaceTime messages. “You can go to your FaceTime call history, press and hold caller ID and report spam, which will send that information directly to Apple,” Breyault said.
Make sure your operating system is up to date
You might want to think twice if you’ve been putting off updating your app. “Whether you use an Android or an iPhone, make sure you keep your operating system up to date as much as possible,” said Breyault, adding, “that will help reduce the risk that fraudsters will take advantage of defects in the operating system to try to get more information from you that you would not want them to have.” To keep your phone up to date, you can rely on the automatic update option, which will ensure that it is always updated as needed.
An Apple representative did not immediately respond to a request for comment, but a recent Apple support article on how to avoid social engineering scams shares ways to protect your Apple devices. Some of Apple’s recommendations include:
- Never share passwords, security codes, private data or click on an unfamiliar link someone sends you.
- Use two-factor authentication and keep your contact information up to date. Never share your passwords or private information with anyone.
- Never use Apple gift cards to make payments requested by other people.
- Learn what Apple’s official email looks like if you have an App Store or iTunes Store purchase. Keep your transactions private when you use Apple Cash.
- Follow Apple’s privacy controls to keep your Apple devices and data secure.
- Avoid downloading software from unverified sources. The same applies to links or attachments in suspicious messages.
- If you receive a suspicious call or messages claiming to be from Apple, contact Apple directly through its official support channels.
Ultimately, you can do a lot to protect yourself from scammers, but it’s important to stay vigilant. “These types of attacks are becoming more and more common, and fraudsters will continue to develop new attacks that will continue to appear, so consumers should cultivate an attitude of caution and skepticism about the requests they receive online,” said Brookman.
