Scam calls are nothing new. They’ve gotten so bad, in fact, that many of us simply refuse to answer unrecognized phone calls. But FaceTime calls are a bit different—while a phone call can come from any device that knows your number, FaceTime calls (both video and audio calls) require an Apple device to know your FaceTime contact details, which could be either your phone number or email address.
In short, FaceTime feels more personal than a phone call, which is probably why many of our guards fall a bit when we get a call that way. However, that probably shouldn’t be the case, if a new scam is anything to go by.
Don’t trust strange FaceTime calls
As spotted by Malwarebytes Labs, Apple is now warning users to be skeptical of strange FaceTime calls. It comes as an update to Apple’s guide on recognizing phishing schemes, which details the many ways hackers try to trick you into handing over sensitive information or financial data. That might have something to do with the uptick in scams involving FaceTime calls. These calls may come from contacts purporting to be “Apple Support,” which can be indistinguishable from legitimate phone calls on the surface. In addition, some scammers text victims directly, including their contact info in the message.
These calls may run the gamut of schemes: The scammer may say the victim has experienced credit card fraud, or an issue with their device, or an authentication request for an account. Maybe they have a refund offer for you to take advantage of, or a limited-time deal you need to claim now. Whatever the case, the situation will likely put pressure on you to act fast, reducing the chance you’ll see through the act.
The point of the FaceTime call may be to lure users into a false sense of security, since, as I’ve said, victims may be less skeptical of a FaceTime call, especially from “Apple Support.” However, it may also give hackers an advantage during the scheme: After starting via a FaceTime audio call, scammers can request to switch to a video call, and have the victim share their screen. Scammers often employ the use of video calling or sharing apps to walk victims through specific steps on their device. And while many convince users to install remote control software on their devices, FaceTime lets users request to control the other caller’s screen remotely. Malwarebytes says that scammers have successfully emptied bank accounts with these schemes.
How to protect yourself from FaceTime scams
Scams are everywhere these days, but that doesn’t mean they’re inevitable. The best defense here is to follow some simple cybersecurity best practices. That involves assuming every call (FaceTime or otherwise) from someone other than a trusted contact is suspicious—even if the call says it’s from an organization like Apple. If on a call, never share private information, especially any that could be used to access your accounts or finances. And while FaceTime scams don’t necessarily rely on security vulnerabilities, it’s helpful to install the latest security patches to plug any known holes in your defenses.
Apple even invites you to report FaceTime calls you suspect of being malicious. If you receive one, take a screenshot of the caller ID, and send that image to reportfacetimefraud@apple.com.
