iPhone Users Beware: Scammers Are Using FaceTime to Steal Bank Info

If you’re constantly receiving scam calls and text messages, you know that not all scammers take the same approach. A recent CBS report found that thieves are impersonating bank representatives to trick people into answering FaceTime calls to “verify” their bank accounts, and then stealing their banking information. 

These schemes work because scammers know how to prey on people’s anxiety, Justin Brookman, director of technology policy at Consumer Reports, tells CNET. “They create a false sense of urgency to get you to take immediate steps or else something catastrophic will happen,” he says.

FaceTime scammers reportedly first send out a call or text message purporting to be an urgent bank account or credit card alert that requires your attention. A number is included in the message that you’re expected to call to connect with the scammer. During the call, the scammer may ask for additional verification and prompt you to answer their FaceTime video call. The FaceTime video allows scammers to manipulate you to share your screen and, in the process, steal your passwords, account numbers and more.  

Victims of this scam have come forward in Reddit threads, and even CBS News correspondent Matt Gutman posted on X about how he fell for this scam. John Breyault, vice president of public policy, telecom and fraud at National Consumers League, tells CNET that all scammers need is a small percentage of people to respond to make these efforts profitable, and video calling is one way to reel in a victim.

“Video conferencing has grown in recent years, and we’ve seen plenty of reports, particularly about scam compounds in places like Southeast Asia, having very elaborate sets to make it seem like the person who’s FaceTiming you is actually who they say they are,” Breyault says. 

In the age of AI, it’s easier to impersonate someone since there are tools that can deepfake audio and video, creating a convincing video call.

“Because of all the information that’s out there about us in the modern age, combined with AI tools, attackers can more easily fine-tune and personalize their attacks at scale to make them seem more realistic,” Brookman says. 

FaceTime scam red flags 

If you suddenly get contacted about your bank account or a credit card being compromised and aren’t sure if you can trust the message, there are some red flags to look out for:

• A bank will never ask to FaceTime you: A trusted institution will never try to video call you if there’s an issue with your account. “The way consumers should handle if they get these types of suspicious requests is not to respond and call the number on the back of your credit or debit card,” Brookman says. That way, you can verify with certainty if something needs to be addressed with your account.
• Don’t click links or call numbers you don’t know: If you’re being targeted with a fraud-related text message that includes a link or a number to call, it’s best to ignore it. “Instead, you should search online for the right customer service number or portal for the bank or provider you think might have been compromised,” Brookman says.

If you find yourself a victim of a scam

Although you can do everything to protect yourself from scammers, there’s always the possibility of letting your guard down. If you find yourself a victim of a FaceTime scam, there are some immediate steps you can take to protect yourself.

Immediately call your bank or financial institution 

Breyault recommends immediately reaching out to the company of the compromised account. “Although scammers often act quickly to try and drain funds, particularly bank accounts, getting in touch with your bank can often help them to take action to stop further intrusion,” he says. In some cases, consumers may recover funds, but it depends on how quickly the attack is reported. 

Use your phone’s safety features 

Know what safety features your smartphone has to prevent being scammed. “Consumers who use iPhones should know that they can silence FaceTime calls from anyone who isn’t already in your contacts,” Breyault says. If someone who isn’t on your approved list tries to video call you, it will go straight to your history without ringing your phone. 

Report spam messages

If you have an iPhone, don’t forget that you can report any spam messages that you receive. The same applies if you receive fraudulent FaceTime messages. “You can go to your FaceTime call history, press and hold the callers infotile and report spam, which will send that information directly to Apple,” says Breyault.

Make sure your operating system is up to date

You may want to think twice if you’ve been putting off updating your operating system. “Whether you’re using an Android or iPhone, make sure to keep your operating system as up to date as possible,” Breyault says, adding, “that will help reduce the risk that scammers could take advantage of vulnerabilities in an operating system to try and get additional information out of you that you wouldn’t want them to get.” To keep your phone up to date, you can rely on the automatic updates option, which will make sure it remains updated as needed.

A representative for Apple did not immediately respond to a request for comment, but a recent Apple support article on how to avoid social engineering scams shares ways to protect your Apple devices. Some of Apple’s recommendations include:

• Never sharing passwords, security codes, private data or clicking on a link you’re unfamiliar with that someone sends you.
• Use two-factor authentication and keep your contact information up to date. Never share your passwords or private information with anyone. 
• Never use Apple gift cards to make payments requested by other people.
• Learn what a legitimate Apple email looks like if you have App Store or iTunes Store purchases. Keep transactions private if you use Apple Cash.
• Follow Apple’s privacy controls to keep your Apple devices and data secure.
• Avoid downloading software from unverified sources. The same applies for links or attachments in suspicious messages. 
• If you receive a suspicious phone call or messages claiming to be from Apple, contact Apple directly through its official support channels.

Ultimately, you can only do so much to protect yourself from scammers, but it’s important to remain vigilant. “These sorts of attacks are increasingly commonplace, and scammers will continue to develop new attacks that will continue to evolve, so consumers have to develop a wary and skeptical attitude about the solicitations they receive online,” Brookman says.