FaceTime Bank Impersonation Scams Target Apple Users and Their Accounts

Scammers are using unexpected FaceTime calls to impersonate banks, financial institutions and Apple Support. Their goal is to convince victims to disclose banking credentials, payment-card information, Apple Account details or one-time security codes.

Apple warns in its social engineering guidance that suspicious FaceTime calls can appear to come from a bank or another trusted organization. The company has established a dedicated email address for reporting these calls and fraudulent FaceTime links.

The scam does not require attackers to compromise FaceTime. According to a Malwarebytes warning, criminals exploit urgency, familiar brand names and the perceived trust of a real-time call to persuade victims to cooperate.

How the FaceTime Bank Scam Works

The contact may begin with a text message claiming that the victim’s bank account has been locked, an unauthorized payment is pending or a refund requires immediate approval. An unexpected FaceTime call follows soon afterward.

The caller presents the video or audio conversation as a security verification. A display name, logo, uniform, office background or previously stolen personal information can make the impersonation appear convincing.

The fraudster then pressures the victim to act before there is time to contact the real institution. The request may involve passwords, card details, verification codes, money transfers or the installation of remote-access software.

1. The victim receives a fake fraud alert, refund notice or account warning.
2. A FaceTime caller claims to represent the victim’s bank or Apple Support.
3. The caller creates urgency by describing an account takeover or unauthorized transaction.
4. The victim is asked to provide account details, card information or a one-time code.
5. The attacker uses the information to access an account or approve a transaction.
6. The caller may keep the victim occupied while the fraudulent activity takes place.

Why a FaceTime Call Can Appear Trustworthy

People often treat video calls as more trustworthy than emails or text messages. Seeing another person in real time can create the impression that the caller has been verified, even when the identity, background and company affiliation are false.

FaceTime identifies callers through a phone number, email address or contact information. A recognizable display name or professional-looking video does not prove that the caller works for the organization being impersonated.

Scammers may also know the victim’s name, address, bank, recent purchases or other personal details. This information can come from data breaches, social media, stolen records or earlier phishing attempts. Knowing personal information does not make the caller legitimate.

Common Requests Made During the Scam

The FaceTime scam report describes callers asking victims to verify financial and account information. Some also attempt to obtain one-time passcodes or persuade victims to install remote-access tools.

Fraudulent request	What the attacker may be trying to do
Online banking username and password	Sign in to the victim’s bank account
Debit or credit card details	Make unauthorized purchases or link the card to another service
One-time verification code	Complete a login, password reset or financial transaction
Apple Account password or device passcode	Access Apple services, personal data or account settings
Screen sharing or remote-access software	View sensitive information or control actions on the device
Transfer to a “safe” account	Move the victim’s money directly to an attacker-controlled account

A genuine security code should never be shared with someone who contacts the user unexpectedly. The code may be the final step the attacker needs to reset a password, add a device or authorize a payment.

FaceTime Is Not Being Technically Compromised

The central risk is impersonation, not a confirmed technical breach of FaceTime. Answering a call by itself does not automatically give the caller access to a bank account, Apple Account or device.

The attacker succeeds when the victim discloses information, approves a request, follows a malicious link, installs software or transfers money. This makes the campaign a form of phishing and social engineering conducted through a live communication channel.

Keeping iOS and iPadOS updated remains important because software updates fix separate security vulnerabilities. However, an updated device cannot stop a user from voluntarily sharing a password or verification code with an impersonator.

Warning Signs of a Fraudulent FaceTime Call

• The call is unexpected and claims to involve an urgent account problem.
• The caller demands immediate action or discourages independent verification.
• The caller asks for a password, device passcode or two-factor authentication code.
• The victim is told to move money to a temporary or protected account.
• The caller requests card numbers, PINs or complete banking credentials.
• The caller asks the victim to install remote-control or screen-sharing software.
• The caller sends a link and insists that the victim sign in while remaining on the call.
• The caller threatens account closure, financial loss or legal consequences.

What Apple Says Users Should Do

Apple says users should treat unexpected requests for passwords, security codes, personal data or money as suspicious. Its anti-scam recommendations state that Apple never asks customers to provide an Apple Account password, device passcode or two-factor authentication code for support.

Apple also advises users not to answer suspicious calls claiming to come from Apple. Anyone concerned about an account or device should contact Apple through an official support channel rather than using contact information supplied by the caller.

The same verification principle applies to banks. End the call, open the bank’s official application or use the number printed on the payment card. Do not call a number supplied in the suspicious message or FaceTime conversation.

How to Report a Suspicious FaceTime Call

Apple asks users to email a screenshot of suspicious FaceTime call information to [email protected]. The screenshot should show the phone number or email address associated with the call.

Users can also follow Apple’s FaceTime spam reporting instructions. On supported software, touch and hold the suspicious call in FaceTime history and select Report Spam.

1. End the suspicious call without providing information.
2. Open the FaceTime app and locate the call in the history.
3. Capture a screenshot showing the caller’s details.
4. Email the screenshot to [email protected].
5. Use the Report Spam option if it appears on the device.
6. Block the caller to prevent further contact.
7. Report related fraudulent text messages through the appropriate message-reporting option.

Filter Unknown and Spam FaceTime Calls

Recent versions of iOS and iPadOS include controls for unknown and suspected spam callers. Apple’s call-filtering instructions explain how to manage these options for Phone and FaceTime.

Users can open Settings, select Apps, choose FaceTime and review the Call Filtering options available on the device. Calls identified as spam or fraud can be silenced and moved to a separate list.

• Turn on the FaceTime spam filter where available.
• Filter or silence calls from unknown contacts.
• Review the Spam and Unknown Callers lists periodically.
• Use Apple’s unknown-caller controls rather than answering every unsolicited call.
• Block callers who repeatedly attempt to make suspicious contact.

What to Do After Sharing Information

Anyone who disclosed banking information should contact the bank’s fraud department immediately through an official number. Ask the bank to review recent activity, secure the account and block or replace affected cards.

If an Apple Account password or verification code was exposed, change the password immediately. Review the list of trusted devices, remove unfamiliar entries and confirm that two-factor authentication and contact information have not been changed.

If remote-access software was installed, disconnect the device from the network and remove the application. Review its permissions, change sensitive passwords from a trusted device and check financial accounts for unauthorized activity.

Information exposed	Immediate response
Bank password	Contact the bank, reset the password and review transactions
Payment-card information	Lock the card and request a replacement if advised
One-time passcode	Check for password resets, new devices and unauthorized transfers
Apple Account credentials	Change the password and review trusted devices
Remote device access	Disconnect, remove the software and audit account activity

FAQ