Beware: The new scam on WhatsApp

The scams and dangers hidden behind apps like WhatsApp remind us how easily even the most trusted platforms can be weaponized against us.

A new, sneaky tactic gaining traction lately is tricking users into sharing their mobile screen during a video call. The screen sharing feature, added to WhatsApp since 2023, is now being used by scammers to steal personal data, identities and money without you even realizing it, warns Christian Ali Bravo from the team at global cybersecurity company ESET.

See more articles from iGuRu.gr when you search for news on Google.

iGuRu.gr preferred source

Such incidents have been reported in various parts of the world, including the United Kingdom, India and Hong Kong, where one victim lost at least HK$5,5 million (about US$700.000) in a carefully organized scam.

Screen sharing scam report from Brazil (Source: Reddit)

How do they trap you? It all starts with your psychology

Scammers don't need to be computer savvy, they just need to know how to manipulate you psychologically. Their goal is to make you trust or panic, so that you act without thinking. A typical tactic they use is this:

1. The call

It all starts with a WhatsApp video call from an unknown number. The scammer pretends to be a bank or service representative, a WhatsApp/Meta support technician, or even a friend or relative in distress. To appear legitimate, they fake a local phone number; the video call may be muted, obscured, or blurred to hide their true identity.

2. The problem

They create a sense of urgency: they claim there’s an unauthorized charge on your card, an active session on another device that needs to be closed, a prize you won that needs verification, or that your account is at risk of being suspended. The goal is to get you to act without thinking.

3. Screen sharing

The scammers then ask you to share your phone screen, under the pretext of “helping” you remotely resolve the issue. They may prompt you to install legitimate remote access applications (e.g. AnyDesk, TeamViewer). Once you do, all incoming messages and verification codes become visible.

4. Access to personal data

With your screen visible in real time, they can steal passwords, 2FA codes, and one-time passwords (OTPs), take screenshots, or convince you to open your banking app and make transfers — all in the name of “fixing” the problem. They can also trick you into installing malware (e.g., keyloggers) that records sensitive data.

5. Theft of accounts and money

Once they have obtained passwords and banking details, fraudsters can empty bank accounts, take over social media accounts, and continue the scam by impersonating you to target your acquaintances.

How to protect yourself

The scam is effective because it exploits three powerful elements: trust (e.g., a video call from a seemingly trustworthy entity), urgency (created by a fake problem), and control (provided through a screen-sharing feature or remote access tool). This combination gives criminals almost complete visibility into your phone.

Therefore, protection from this fraud depends more on awareness and discipline than on technological security measures.

With this in mind, follow these basic practices:

1. Never share your screen with someone you don't know personally, especially during an unsolicited call. If you receive a call from an unknown number and the caller claims to represent a bank, internet service provider, or other entity, hang up and contact the entity directly through a verified communication channel.

2. Never give out your passwords, verification codes, or any personal/financial information over the phone. Banks and services will never ask for such information through unsolicited calls or messages.

3. Avoid installing remote access applications at the request of strangers, tools like AnyDesk or TeamViewer can grant full control of your device.

4. Don't immediately believe everything someone tells you. Check official sources yourself to verify "worrying" information. Scammers will try to pressure you and cause you to panic, resist the urge to act immediately. Take a deep breath and think.

5. If someone claims that there is a problem with your bank account or that a friend/relative is "in trouble", first contact the bank or the person directly through another, verified channel before taking any action.

6. Enable two-step verification (2FA) on WhatsApp: Settings → Account → Two-step verification → Enable/Set PIN. This way, even if hackers get your login details, they'll still need the second factor to get into your account.

Scams like this remind us that social engineering remains one of cybercriminals' most powerful weapons. A momentary misjudgment can wipe out a lifetime's savings, so awareness is the first and strongest line of defense. And remember: to be safe, question first, then trust. Not the other way around.

newsbot

Although the press releases will range from very select to rare, I said I'd pass...because sometimes the editors hide.