Security Bite Podcast: Why scammers love FaceTime now

Apple quietly published a support article warning iPhone users about a new scam vector: FaceTime calls from fraudsters impersonating bank representatives. According to 9to5Mac, the company is responding to a measurable uptick in video-based impersonation attacks, a shift that signals scammers have found a workaround for our growing skepticism of text and voice-only fraud.

The reason FaceTime scams work is deceptively simple. We've been trained to distrust unknown callers and suspicious texts, but a live video call triggers a different psychological response. When you see a person on screen, even a stranger in business attire with a branded backdrop, your brain assigns credibility that a robocall never earns. Scammers are exploiting that trust gap.

Clayton LiaBraaten from Truecaller, a company that specializes in call identification and blocking, explained in the Security Bite podcast that these attacks often start with spoofed caller ID to display a legitimate bank name, then escalate to a FaceTime request to "verify your identity." Once on video, the scammer uses social engineering, urgency, and the appearance of professionalism to extract account details, one-time passwords, or direct transfers.

What makes this particularly dangerous is that FaceTime feels private and secure, which it is from an encryption standpoint. But encryption doesn't protect you from willingly handing over your credentials to someone who simply looks trustworthy. The scam isn't breaking Apple's security, it's breaking human judgment.

Apple's warning is a reminder that even our most trusted platforms can be weaponized through social engineering. No legitimate bank will cold-call you on FaceTime, ever. If you receive an unexpected video call claiming to be from your financial institution, hang up and call the bank directly using the number on their official website or the back of your card.

What this means for you: train yourself and your team to treat unsolicited video calls with the same suspicion you'd give a phishing email. If you're building customer-facing workflows with AI tools, consider adding a verification step that reminds users of these scams. Here's a prompt you can use with an AI assistant to draft internal security reminders: "Write a short, clear internal memo explaining the FaceTime bank scam, why video calls feel trustworthy, and a simple three-step process employees should follow if they receive one." Making security awareness conversational and specific is how it actually sticks.