How a fast-growing rip-off is tricking WhatsApp customers into revealing their most delicate monetary and different knowledge
05 Nov 2025
•
,
4 min. learn
Scams and different threats which might be doing the rounds on messaging apps like WhatsApp are a stark reminder of how simply even trusted platforms may be weaponized towards us.
One misleading tactic that has gained traction lately entails tricking individuals into sharing their cellphone screens throughout a WhatsApp video name. The screen-sharing function, obtainable in WhatsApp since 2023, is more and more being turned towards the app’s customers to steal their knowledge, identities and cash.
Circumstances of what’s basically a spin on distant entry fraud have been reported from numerous elements of the world, together with the UK, India and Hong Kong, the place one sufferer misplaced a minimum of HK$5.5 million (US$700,000) in a rigorously orchestrated ploy.
Right here’s what it’s best to know concerning the rip-off and how one can keep protected from it.
How does the rip-off unfold?
Because the purpose is to construct belief or create panic so that you simply act impulsively, the rip-off depends much less on technical wizardry and extra on psychological manipulation. Right here’s the way it usually unfolds:
1. The decision
Every part begins with a WhatsApp video name from an unfamiliar quantity. The scammer masquerades as a financial institution or service consultant, a WhatsApp or Meta help agent, or perhaps a pal or relative of yours in misery. To look legit, they spoof a neighborhood cellphone quantity whereas their video feed could also be disabled, darkish or blurry to hide their true identification.
2. The issue
Subsequent comes a way of urgency. The caller will declare that there’s an unauthorized cost in your bank card, an open session on one other system that must be closed, a pending prize that wants your verification, or a threat that your account could also be suspended. The purpose, after all, is to create a way of panic and get you to behave with out considering twice.
3. Display screen sharing
The scammer then asks you to share your cellphone’s display, ostensibly to help you remotely to allow them to “resolve” the alleged concern. It’s possible you’ll be requested to put in a legit distant entry app, corresponding to AnyDesk or TeamViewer. When you oblige, any incoming textual content messages and WhatsApp verification codes turn into seen to them. With these of their arms, the attacker can instantly take over your WhatsApp account. It will get even worse from right here, nevertheless.
4. Entry to private knowledge
Along with your display seen to the unhealthy actor in actual time, they will additionally steal your passwords, 2FA codes, one-time passwords (OTPs), in addition to seize screenshots or ask you to open your banking app and trick you into making financial institution transfers – all below the pretext of resolving the purported drawback. They will additionally dupe their marks into putting in malware, corresponding to keyloggers, that silently information delicate info for later theft.
5. Theft of accounts and cash
After acquiring verification codes and banking knowledge, scammers can drain your banking accounts and hijack social media and different on-line accounts and go on to impersonate you to proceed to rip-off, this time concentrating on your family members and pals.
Methods to defend your self
The rip-off is efficient as a result of it exploits three potent substances: belief (created by a video name from a trusted entity), urgency (created by a fabricated drawback), and management (granted by means of the display sharing function or a distant entry software). This mixture offers criminals near-total visibility into your cellphone.
Staying protected from this rip-off, due to this fact, relies upon extra on consciousness and self-discipline than on technological safeguards. With that in thoughts, stick to those important practices:
- By no means share your display with somebody you don’t personally know, doubly so throughout an unsolicited name. For those who obtain a name from an unknown quantity the place the caller claims to signify a financial institution, on-line service supplier or another trusted entity, dangle up and get in touch with the establishment instantly by means of a verified channel.
- By no means share your passwords, verification codes or any private or monetary knowledge over the cellphone. On-line providers, banks or another legit firms won’t ever ask in your passwords, PINs, or card particulars by means of unsolicited calls or messages.
- Keep away from putting in remote-access apps on the behest of strangers as distant entry instruments like AnyDesk or TeamViewer can grant them full management of your system.
- Confirm alarming info independently. Remember that scammers will attempt to rush you into motion, usually by making you panic. Resist the urge to oblige; as a substitute, take a deep breath and assume.
- If somebody claims that there’s an issue along with your checking account or your pal or relative is in hassle, contact your financial institution or your relative instantly and thru one other channel earlier than taking any motion.
- Allow 2FA in WhatsApp (referred to as two-step verification within the app) by navigating to Settings → Account → Two-step verification → Activate or Arrange PIN. That means, even when cybercriminals pay money for your login credentials, they’ll want this second issue to entry your account.
Staying safe begins with skepticism
The rip-off described above is one other reminder that social engineering stays probably the most highly effective weapons in a cybercriminal’s arsenal. It additionally reveals how a momentary lapse in judgment can wipe out your life financial savings. In circumstances like these, due to this fact, consciousness is your first and strongest line of safety.
