They Don't Need to Hack Your Bank. They Just Need You to Show Them Your Screen

They don't need your password. They just need you to type it while they watch.

I want you to ask yourself something before I tell you how this scam works. If a company you trust called you right now, sounding calm, professional, maybe even a little concerned about "unusual activity" on your account, how long would it take before you did whatever they asked?

Be honest. For most people, the answer is faster than they'd like to admit. That instinct, the one that makes you want to cooperate with authority, is exactly what this scam is built on, and it's spreading fast enough that I don't think it's staying contained to any one country for long.

How This Scam Actually Works

Here's the sequence, straight from CBS News' reporting. It starts with a text message about "unusual activity" on your bank account or credit card, or sometimes a direct phone call, asking you to call a number for "additional verification" . Once you're on the phone, the scammer switches the call from audio to FaceTime, Apple's video calling app, specifically because people trust it, they see it as a secure, legitimate platform, and that trust is the entire mechanism the scam depends on .

Once you're on video, the scammer convinces you to share your screen while you log into your online banking app to "verify" your account. From there, they simply watch. They see your password, your account numbers, and even your one-time security codes, the ones your bank sends specifically because they're supposed to be unshareable; in real time, as you type them .

Apple has confirmed this is happening and has set up a direct reporting channel; reportfacetimefraud@apple.com . Their advice is direct and worth repeating exactly as they said it; Apple will never ask for your password, passcode, or two-factor authentication code, over FaceTime or any other channel .

Ask yourself; if the company that built the app is telling you they never need this information, why would a bank calling through that same app need it either?

This Isn't Just a FaceTime Problem, and It Isn't Just a US Problem

I want to be very clear about something, because I think it's the most important part of this story. FaceTime is just this month's costume. The underlying scam, tricking someone into sharing their screen while logging into a financial account, has already been running for years across multiple countries, under different names, on different apps.

In the United Kingdom, the Financial Conduct Authority reported that screen-sharing scam cases rose 86 percent in just six months, from 367 cases to 683, with more than 25 million pounds lost between January 2021 and March 2022 alone. One woman lost 20,000 pounds after being talked into sharing her screen over WhatsApp, not FaceTime, proving this technique isn't tied to one specific app at all. Ireland's Bank of Ireland issued a near-identical warning about a "live chat" screen-sharing scam that specifically targeted customers across the UK, Ireland, the US, Australia, and New Zealand.

In Canada, police in Ontario are actively investigating cases right now, including one victim who lost over 60,000 dollars after allowing a scammer remote screen access, believing they were speaking to tech support or their financial institution. The Canadian Anti-Fraud Centre exists specifically because this pattern is already established and growing there too.

So here's my honest read for my readers across the EU; I haven't found reporting yet showing this exact FaceTime version has landed widely on the continent. But the underlying scam, using a trusted video platform to manufacture false intimacy and pressure someone into sharing their screen, has already proven itself in the UK and Ireland. If you're in the EU reading this, I don't think it's a matter of if this style of scam reaches you. I think it's a matter of when, and I'd rather you recognize it on day one than learn about it from a bank statement.

Why This Scam Works So Well

I don't think people fall for this because they're careless. I think they fall for it because it's built around three things that override rational thinking in the moment; urgency, authority, and trust in a familiar platform.

The FCA's own guidance nails this exactly. They recommend asking yourself three questions the moment something like this happens; have you checked whether the company is verified, are you being asked to download anything or share access you wouldn't normally share, and have you been steered away from your actual banking app into some other channel. Every one of those questions exists because scammers are betting you won't stop to ask them mid-call.

Apple's own advice echoes this. Urgency is the biggest red flag of all. Anyone who pressures you to move money immediately, on the spot, without giving you time to think, should be treated as suspicious by default .

Signs You May Be Talking to a Scammer, Not Your Bank

• You received an unsolicited text or call about "account activity" and were asked to call a number included in that message

• The caller shifted the conversation from a normal phone call to a video call, specifically requesting you turn on screen sharing

• You're being asked to log into your banking app while someone else watches, for "verification" purposes

• The person on the call creates urgency, implying your account will be locked, frozen, or drained if you don't act immediately

• You're asked for a one-time passcode or two-factor code, something no legitimate bank or company will ever ask you to read aloud or share

I want to be fair here too. None of these signs alone proves fraud. Banks do sometimes call customers about real account activity. The difference is what they ask you to do next, and a legitimate bank will never ask you to share your screen while you log in, and will never ask for your one-time passcode over any call, video or otherwise .

What to Do If This Happens to You

1. Hang up. Don't argue, don't explain, don't stay on the line trying to figure out if it's real. Just disconnect

   
   

2. Call your bank directly using the number printed on the back of your physical card, never a number given to you during the suspicious call or text

   
   

3. If you're in the UK or Ireland, report it to your bank's fraud line immediately, most maintain 24/7 lines specifically for this

   
   

4. If you're in Canada, report it to the Canadian Anti-Fraud Centre at 1-888-495-8501 or through their online portal

   
   

5. If the call happened over FaceTime specifically, take a screenshot of the call information and email it to reportfacetimefraud@apple.com

   
   

6. If you already shared your screen, disconnect your device from the internet immediately, run a security scan, and change your passwords for your banking, email, and any other financial accounts right away

Before You Go

I want to ask you the same question I opened with, because I think it's worth sitting with a second time now that you know how this actually works. If someone calling you right now sounded calm, professional, and just concerned enough about your account to seem believable, would you have caught this before they asked you to share your screen?

I hope the answer is yes now. That's the whole point of writing this. Tell me in the comments if you or someone you know has ever been targeted by something like this, in the US, the UK, Canada, or anywhere else, because the more of these stories we share publicly, the harder it gets for this scam to keep working on the next person.

Stay sharp. Stay loud.

➡️ Related: [SMS Blasters: The Text Scam That Can Actually Kill You] 

➡️ Get our free Spyware and Scam Alert checklist: tech4grownups.com/spyware-checklist

➡️ Join the free Tech 4 Grown-Ups community: tech4grownups.com/community

➡️ Listen to the full podcast episode: [Your AirPods May Be Tracking You - SignalTrace and Surveillance] 

Michael Routhier is the founder of Tech 4 Grown-Ups, providing honest, unfiltered digital literacy for adults 55+, and host of The Virtuous Machine, exploring the ethics and human cost of AI. Read by tech-curious readers in 50+ countries. Explore more at tech4grownups.com.