WhatsApp video call scam: how it works and how to protect yourself

In recent times there has been a surge A highly sophisticated scam that uses WhatsApp video calls as bait to steal accounts, empty bank accounts, and solicit money from the victim's contacts. Although WhatsApp has significantly strengthened its privacy features, cybercriminals rely on social engineering and trust to gain easy access to our phones.

This deception is especially dangerous because It usually starts with a call from someone who seems trustworthy.It could be someone claiming to be a bank technician, Meta support, or even worse, a friend or family member whose number has already been hacked. From there, the excuse to get you to share your screen during a video call is as simple as it is effective, and as soon as you fall into the trap, you lose control of your WhatsApp account and, often, your money.

What is the WhatsApp video call scam and why is it causing so much concern?

This scam is based on a a video call via WhatsApp in which you are asked to share your screen With any excuse: a technical problem, a camera malfunction, or a supposedly urgent matter. Once they see what's on your phone, they can capture verification codes, passwords, messages, and banking information.

The disturbing thing is that It's not always about strange or international numbersIn many cases, the caller is a real contact whose WhatsApp account has already been compromised. This creates a huge amount of trust: you see their name and photo, you believe it's them, and you let your guard down without thinking twice.

The authorities and companies of ciberseguridad , the ESET or National Institute of Cybersecurity (INCIBE) They have issued formal warnings, because this method not only allows you to take over a WhatsApp account, but also to... extend the chain scam to dozens of contacts, many of them family and friends.

According to recent data, Meta has managed to delete millions of WhatsApp accounts related to fraudulent activities.including organized scam centers. This gives an idea of ​​the scale of the problem and the extent to which this type of crime has become professionalized.

How the video call scam works step by step

Although there are slight variations, the deception usually follows a very similar scheme in almost all casesThe criminals combine a video call, an urgent problem, and the screen sharing option to gain control of the victim's device and account.

1. First call: suspicious video call

It all starts with a WhatsApp video call that arrives unexpectedlyIt can come from an unknown number or, worse, from the number of a trusted contact that has already been spoofed. The attacker presents themselves as:

• Bank employee who calls about a strange charge or a suspicious transaction.
• Meta or WhatsApp technical support which claims to detect a security flaw or a camera error.
• Family member or friend with an urgent problemwho needs immediate help and appeals to your goodwill.

In many cases, the attacker The camera turns off or displays a completely black or blurry imageThe typical excuse is that the camera isn't working, that it's in a poorly lit place, or that the person is "fiddling with the phone's settings" and that's why it doesn't look good.

2. Creation of the urgent problem

The next step is to generate haste and concern in the victim. The scammer introduces a supposed problem that requires immediate action, without time to think calmly:

• Un unauthorized charge on the card or in the bank account.
• Un strange access attempt to the WhatsApp account or to online banking.
• Un prize pending confirmation that is about to expire.
• La possible service suspension from WhatsApp or the bank itself if something isn't done "right now".

With that atmosphere of nervousness and haste, the cybercriminal insists that he is there to “help you solve it in a moment”and that you only need to follow a few simple steps from your mobile phone.

3. Request to share screen (and sometimes remote access apps)

The key to the deception is getting the victim to Activate the screen sharing function in the video callOn WhatsApp, this option allows you to show live everything that happens on your phone: notifications, messages, codes, apps, etc.

In some more advanced variations, the scammer guides the victim to install remote control applications , the AnyDesk or TeamViewer. They offer excuses like "this way I can help you better from here" or "it's the official support tool." If this remote access is granted, the criminal can control the phone almost as if they had it in their hand.

In any case, whether using screen sharing or remote apps, the result is the same: the attacker See everything that appears on your mobile in real timeincluding SMS, WhatsApp pop-up notifications, emails, and bank details.

4. Theft of WhatsApp verification code

While the victim has the screen shared, the perpetrator tries Register your WhatsApp account on another deviceTo do this, request WhatsApp to send you an SMS with the famous six-digit verification code.

That SMS arrives on the victim's mobile phone and, since the screen is being shared, The message content is visible to the attacker.Sometimes the person doesn't even need to open the message: it's enough for the pop-up notification to display the code at the top.

In other cases, the scammer directly asks the victim to... read the code or forward it “to confirm identity”They claim it's a routine procedure at the bank or technical support. If the victim is nervous and trusts them, they hand it over without thinking.

Once the criminal enters that code into their own device, He gains control of the WhatsApp accountThe session automatically closes on the original mobile device, and the victim is left out without really knowing what happened.

5. Access to data, accounts and theft of money

Using screen sharing or a remote access app, the attacker It usually goes beyond WhatsAppIf the victim allows it, you can ask them:

• Open the bank's app or online banking to “check for suspicious movements”.
• Enter passwords or security PIN, which are recorded.
• Confirm transactions Bizum, transfers or other payments under deception.

In some advanced incidents, the installation of malware keylogger type (pulse recorders), which allow attackers to continue stealing data even after the call.

With all that information, they can empty accounts, move money to other accounts or wallets and, of course, use the stolen WhatsApp account to continue expanding the network of victims.

What do criminals do once they've stolen your WhatsApp?

Once they have control of the account, cybercriminals don't just snoop through your chats. In a matter of minutes, They start exploiting your identity and your contacts to extract money and continue spreading the fraud.

Using your identity to request money (Bizum and transfers)

One of the most common tactics consists of send messages to your contacts pretending to be youThe typical message usually appeals to urgency and trust: "Hey, can you send me a quick Bizum? I'm having a problem and I'll pay you back later," or similar variations.

There have also been cases where, from the stolen account, the scammer It asks contacts to forward an SMS code. which they just received, claiming it was a mistake or due to a procedure. With that code, they can repeat the process and hijack more accounts.

The effect is devastating, because your friends and family They don't suspect someone they talk to every dayThey see your name and photo, they trust you, and in many cases, they end up sending money or providing new sensitive data.

Chain of fraudulent video calls

In some frauds detected by INCIBE, the pattern repeats itself in a "snowball" fashion: the attacker, already inside your account, Start making video calls to your contacts using the same excuse of technical problems or urgent help.

The person receiving the call thinks it's you, so it's very likely that accept to share screen or give dataThis creates a chain of victims: first they steal from you, then from your contacts, and from there the reach can be enormous.

Change of security parameters and blocking of the legitimate owner

When criminals gain control of an account, one of their first moves is Strengthen security… for them. They can:

• Modify the email associated with account recovery.
• Turn on XNUMX-Step Verification with a PIN that only they know.
• Change privacy settings to make it harder for others to suspect.

In this way, even if the victim tries to regain access, they encounter an additional obstacle: You need a PIN that you never set upbecause the attackers put it there to buy time and continue committing fraud.

Real cases and significant economic losses

This type of scam is not theoretical. It has been documented. real cases in different countries with significant lossesFor example, forums like Reddit report the case of a woman in Brazil who lost around 3.000 reais after supposedly helping a friend with an online purchase problem. The friend had already been hacked, and her identity was used to deceive her through a screen-sharing video call.

An even more serious case was reported in Hong Kong, with losses exceeding five million dollarsThe attacker impersonated a telecommunications company employee offering assistance in canceling a service. During the video call, the victim shared their screen, accessed their bank accounts, and provided passwords and verification codes that ultimately fell into the hands of the criminals.

These examples illustrate the extent to which The combination of social engineering and video calls can be devastating., both for your wallet and for your privacy.

Alerts and recommendations from the Police, INCIBE and cybersecurity experts

In response to the increase in cases, various official institutions and security companies have published very clear warnings about this type of fraud and they have explained how to recognize and avoid it.

The National Police warning

The National Police, through its official account on TikTokHe explained it simply. modus operandi of these scammersThey emphasize that the criminals impersonate WhatsApp technical support, claim that the camera is not working properly, and ask the user to press the screen share button to "fix" it.

The recommendation is unequivocal: WhatsApp does not contact users via video call to resolve technical issues They don't ask you to share your screen or provide verification codes. Any call that says otherwise is suspicious and should be hung up immediately.

INCIBE Press Releases and Guide

The National Cybersecurity Institute has detected multiple incidents of this type through the 017 helpline. In one of the reported cases, a user lost access to their WhatsApp account after a video call in which All that could be seen was a black screenAfter sharing theirs, the verification SMS appeared and the attacker took control of the account.

INCIBE details the steps to react: quickly notify contacts, try reinstall WhatsApp and regain accessYou can contact the application's support and even, if the matter drags on, contact WhatsApp's Data Protection Officer and, ultimately, the Spanish Data Protection Agency.

The agency also insists on gathering all possible evidence (messages, screenshots, bank statements) and file a complaint with the State Security Forces and Corpssince it is a clear crime of identity theft and, in many cases, of financial fraud.

Essential tips from ESET and other experts

Specialized companies like ESET Several key points stand out. that any user should have burned into their memory to reduce the risk of falling into the trap.

• Do not share your screen with strangers nor with supposed technicians who call unexpectedly.
• Do not share codes or passwords by phone, video call or messaging.
• Be wary of any situation that generates panic or haste for taking decisions.
• Check for bank or technical alerts contacting the entity directly through its official channels.
• Activate two-step verification on WhatsApp to put an additional barrier against attackers.

How to avoid falling for scams: practical guidelines

The best defense against this type of deception is to combine common sense, healthy skepticism, and some basic technical measuresYou don't need to be a computer expert to protect yourself quite well against these tactics.

Do not share your screen in “weird” video calls

Golden Rule: Never share your screen on a video call if you're not absolutely sure who you're talking to and what the purpose is.If you can't see the other person's face, suspicion should be at its highest.

Even with friends, family, or coworkers, it's a good idea to get used to ask beforehandAsk, "Why do you need me to share my screen?" And if the reason isn't clear or you don't see it as necessary, refuse without hesitation. It's okay to seem suspicious; what is a problem is that you could lose your account or your savings.

Confirm the identity of known contacts

When the call comes from someone you know well, the scam becomes more subtle. In these cases, it's good to have a few things on hand. questions or details that only that person would know how to answer (“What was the name of the restaurant where we ate the other day?”, for example).

Another highly recommended option is contact through a different channelTry calling them on a regular phone, sending a text message or email, or using another messaging app. If your friend is really in trouble, they'll confirm it that way; if they don't respond or say they don't know what you're talking about, it's almost certain their account has been compromised.

Do not share verification codes under any circumstances

The verification codes that arrive via SMS, whether from WhatsApp, the bank, or other services, are personal and non-transferableNo reputable company will ask you for them via call, message, or video call if you haven't initiated the process beforehand.

If someone asks you for that code claiming it's to "verify your account," "cancel a charge," or any other excuse, the correct thing to do is Hang up and, if you still have doubts, call the bank or official support yourself.You must enter the code yourself into the corresponding application or website; never dictate it to another person.

Avoid using remote access applications if a third party requests them.

Remote control apps aren't inherently bad, but in the wrong hands they become a full gateway to your deviceIf someone you don't know at all asks you to install one of these tools, the wisest thing to do is to refuse outright.

In the banking environment and in serious support services, They're not going to require you to install that type of software Just to resolve a basic issue. If you hear names like AnyDesk, TeamViewer, or similar mentioned by a supposed technician who calls you unexpectedly, be suspicious.

Check any alarmist or overly urgent messages.

A classic sign of social engineering is the use of fear and urgency. Messages such as “You have to do this now or you'll lose your account"should set off all your alarms."

Before acting, pause, breathe and Find the information on your own.Go directly to your bank's app or WhatsApp, check for official notifications, or call the customer service numbers listed on their websites. If everything seems normal, you know the call was a scam.

Activate two-step verification on WhatsApp

WhatsApp offers a very useful feature called two step verificationIt involves setting a six-digit PIN that the app will ask for when someone tries to register your number on a new device, even if they have the verification SMS.

To activate it, simply go to Settings > Account > Two-step verification, follow the instructions, and choose a PIN you'll remember. This way, even if an attacker obtains the SMS code by looking at your screenYou will not be able to access your account without that second factor.

What to do if you've already fallen for the WhatsApp video call scam

If you suspect your WhatsApp account has been stolen or that you shared more than you should have during a video call, it is essential to... act quickly to minimize damage and try to break the chain of deception.

1. Notify your contacts of what has happened

As soon as you realize you can no longer access your WhatsApp, or you see strange activity, try communicate with your family, friends and groups through other channels (call, SMS, email, social media) to warn you that your account may have been compromised.

ask them to Ignore any messages, requests for money, or codes that it comes from your number until further notice. The sooner they know, the less likely they are to become victims too.

2. Reinstall WhatsApp and try to regain access

The next step is Uninstall and reinstall the WhatsApp application on your mobile phone. When you log back in with your phone number, the app will send another verification code via SMS, and in many cases this is enough to regain control of your account.

It is possible that a message will appear indicating that You must wait several hours (for example, between 9 and 11) to try again. In that case, respect There Please follow the instructions and try again later. In the meantime, please keep your contacts informed that your account is still being recovered.

3. Contact WhatsApp support

If reinstalling doesn't solve the problem or you suspect someone has activated two-step verification with a PIN you don't knowYou'll need to contact WhatsApp support directly. You can report the account theft through the app's help center or its official website.

In some cases it will be necessary to contact WhatsApp Data Protection Officer And, if there is no response or solution within one month, a complaint can be filed with the Spanish Data Protection Agency, alleging a violation of the right to recover the account.

4. Review bank transactions and block products if necessary

If you opened your online banking or provided financial information during the video call, it's advisable to thoroughly review your accounts, cards, and associated services.Check for any unusual transactions, payments you don't recognize, or transfers you don't remember making.

At the slightest suspicion, the most prudent course of action is contact your bank immediatelyBlock cards if necessary, change passwords and activate additional security measures (two-factor authentication, transaction limits, etc.).

5. Save evidence and report it

Finally, don't forget that this is a crime. It's important. gather all possible information: screenshots of the conversation, call logs, emails, bank transaction receipts and any other data that may serve as evidence.

With all this, he goes to the State Security Forces and Bodies (National Police, Civil Guard, or regional police) and file a report for identity theft and, if there are financial losses, for fraud. The more reports filed, the easier it will be for the authorities to detect patterns and prosecute these groups.

The WhatsApp video call scam demonstrates the extent to which Social engineering can be more dangerous than a technical failureIt's not necessary to breach complex systems; it's enough to get the victim to act hastily and with blind trust for a few minutes. Maintaining a cautious attitude, being wary of unusual requests, protecting accounts with two-step verification, and knowing how to react if something goes wrong are habits as essential today as setting a password on your phone. Ultimately, the best defense is combining technology with a healthy dose of skepticism when faced with what comes to us through the screen.