Scammers are increasingly exploiting FaceTime to impersonate Apple support representatives, using the video feature to steal financial data. While traditional phone scams rely on the victim answering a call, FaceTime requires a compatible device and pre-stored contact details, which creates a false sense of familiarity. Apple recently updated its guidelines to warn users about this specific threat, advising people to treat any unsolicited request for help with skepticism.
How the Scheme Works
These scams typically begin with a request to switch from an audio call to a video call. Once the connection is live, the fraudster asks the victim to share their screen. From there, the scammer can guide the user through installing remote control software. This allows the attacker to manipulate the device directly, often leading to drained bank accounts. The pressure to act quickly is a common tactic used to prevent the victim from noticing the signs of fraud.
The mechanics of these attacks exploit the fact that FaceTime contacts are saved within the user’s device. A phone number alone cannot initiate a FaceTime request without an existing entry in the contacts list or a linked email address. This technical requirement gives the scammer’s caller ID a veneer of legitimacy, making it difficult for the average user to distinguish between a trusted contact and a fraudster. Once a victim accepts the request, the attacker bypasses the standard verification steps often used in support scenarios.
Malwarebytes Labs has observed that these fraudsters frequently employ text messages to initiate contact. They may send a message containing the victim’s contact information directly within the text, followed by a FaceTime request. This dual approach creates a seamless transition, making the initial contact appear even more legitimate. The callers often claim to represent Apple Support, using this title to establish immediate authority and trust.
Related: Top Picks After Watching Cape Fear
Scammers utilize various narratives to lure victims into the trap. They might allege that the victim has experienced credit card fraud, device issues, or an authentication request for an account. Other common pitches include offering a refund or a limited-time deal that requires immediate action. By presenting these scenarios, the fraudster forces the user into a reactive state, prioritizing the resolution of a perceived problem over their security.
Protecting Your Information
Security experts recommend maintaining strict boundaries during these interactions. If a person claiming to be from Apple asks for sensitive information or requests screen sharing, the safest course of action is to end the call. Users should never install remote control applications based solely on a request from an unsolicited FaceTime caller. The burden of proof should always fall on the support representative to verify identity, not the user to prove their innocence.
Apple provides a specific channel for reporting these incidents. If you receive a suspicious call, you should take a screenshot of the caller ID and send it to [email protected]. While this does not reverse any financial losses already incurred, it helps Apple identify patterns and shut down these networks. Keeping the operating system updated is also a basic defense, as it closes the technical gaps that scammers might otherwise exploit.
The most effective defense involves adopting a mindset of skepticism regarding unsolicited communication. Users should assume that any contact from an organization like Apple, originating from a number not saved in their contacts, is suspicious. This precaution applies equally to text messages and voice calls. By refusing to engage with these requests and instead blocking the number, individuals can protect themselves from financial loss.
