Which? warns of WhatsApp screen-sharing scams

Which? has warned of a screen-sharing scam in which fraudsters pose as banks and the Financial Conduct Authority (FCA) to gain access to accounts and steal sensitive information¹. The consumer body said it has received a steady stream of reports of WhatsApp screen-sharing scams this year¹.

WhatsApp launched its screen-sharing feature in 2023 so that users can share documents and photos on video calls¹. Which? said the feature has also attracted scammers, who typically open with an out-of-the-blue call claiming an account is at risk, then try to move the conversation to a video call on FaceTime or WhatsApp where a screen can be shared in a few clicks¹. Once screen-sharing is enabled, the scammer can see almost everything on the phone, including notifications of one-time passwords sent by banks to authorise payments¹.

In one case reported by Which?, two men claiming to be FCA inspectors contacted a man named William directly on WhatsApp, warning that his phone had been infected with viruses and instructing him to share his screen¹. The scammers kept him on the phone for 20 hours spread over three days, during which time they stole more than £27,000, including six iPhone and iPad purchases¹. William told Which? that the screen on his phone said FCA, that the men said they were in contact with the police, and that he was told to speak to no one, including family and friends¹. He said he was on the phone for eight hours on the Friday, eight hours on the Saturday and four hours on the Sunday, when his brother and sister-in-law arrived and told him it was a scam¹.

Which? listed five tactics it identified from scam reports: fake security alerts about hacked accounts, viruses or high-value card purchases; spoofed logos and caller IDs of bodies including the FCA, the Financial Services Compensation Scheme, banks and building societies; pressure, urgency and secrecy, including being kept on the phone for extended hours or told not to speak to family or bank staff; the use of any screen-sharing tool, including built-in functions on Windows and Apple devices; and tricks to cash out, such as intercepting one-time passcodes or guiding transfers and purchases¹.

Meta has introduced warnings when users attempt to share their screen with an unknown contact during a WhatsApp video call¹. Images sent by unknown contacts are blurred by default, calls from unknown numbers can be silenced, and links from unknown senders are disabled until the user chooses to engage with them¹.

Why it matters for households

The scam targets people who hold current accounts, savings and credit cards, and it can affect them regardless of which bank they use, because the fraudster's aim is to see the screen rather than to exploit a specific provider¹. The sums involved can be large: in the case Which? reported, more than £27,000 was taken over three days, including purchases of six iPhones and iPads¹. Because one-time passcodes sent by banks appear on the screen, a shared screen can expose the codes used to authorise payments¹. Which? said the problem is not limited to WhatsApp, as scammers will use any screen-sharing tool available, including built-in functions on phones, tablets, laptops and computers¹.

What happens next

Which? directs people who have been targeted to call their bank and to report the matter either online at reportfraud.police.uk or by calling Report Fraud on 0300 123 2040¹. It also notes that 159 can be used to be put through to major current account fraud departments¹. No further regulatory or industry action has been reported. For background on the warning signs of this type of fraud, see how to spot a scam and the scams and fraud section.