The alert for WhatsApp account theft via video call It's back on the table after several cases in Spain with the same pattern: video call, black screen, request to share the screen, and then account takeover. The warning has been forwarded to the National Cybersecurity Institute (INCIBE), which has published recommendations to reduce the impact.
The Civil Guard has also spread the warning on its X channel, stressing that codes should not be revealed or screens shared Respond to suspicious requests, even if they appear to come from a trusted contact. Scammers' goal is to see the registration code WhatsApp sends via SMS to complete the account hijacking.
How the video call scam works
It all starts with a video call from a known or spoofed number, where the screen appears completely dark. The caller claims to have a problem with their phone and asks for activate the screen sharing function to “check” if it is solved.
While sharing the screen, a notification arrives with the WhatsApp SMS containing the verification codeOnce it's visible on the victim's phone, the scammer notes it down in real time.
With that code, the attacker registers the account on his own device. Within seconds, the app closes on the affected person's phone and loses access to your WhatsApp unable to log in again.
Once inside, cybercriminals usually write to the user's contacts to Request money through Bizum urgently or request other codes received by SMS, taking advantage of trust and haste to chain new frauds.
Another clue to watch out for: if you receive a WhatsApp notification indicating that someone tries to register your number and you weren't, don't share anything and cancel any verification attempts.
What to do if your account has been stolen
The first thing is to notify your contacts as soon as possible, especially the person from whom the video call came to you, so that don't fall for impersonation nor respond to requests for money or codes.
Next, try reinstalling WhatsApp to force a new registration process. If the system indicates a time limit of wait 9 to 11 hours, respect it and try again later.
If you don't regain access, contact official WhatsApp support from the app or by email. If you don't get a solution, escalate your request to WhatsApp Data Protection Officer And if after a month there is no response or it is negative, file a complaint with the Spanish Data Protection Agency (AEPD).
Gather evidence (screenshots, numbers, times, text messages, calls) and file a complaint with the appropriate authorities. This documentation helps investigate impersonation and protects other potential victims.
Once you recover your account, check the devices linked to WhatsApp Web and close any unknown sessions. Take this opportunity to activate additional security measures and check that there are no open accesses.
How to reduce risk: preventive measures
Activate the two step verification on WhatsApp and add a recovery email for the PIN and make a cloud backup; without this step, it will be much more difficult for an attacker to maintain control of your account.
Don't share your screen over a video call unless you're absolutely sure it's okay and have verified it through another channel. Even if a known contact calls you, distrusts abnormal situations such as the black screen or the urgency arguments.
Never give or show to anyone codes received by SMS or the two-step verification PIN. These are personal and non-transferable and allow you to complete someone else's registration.
If you encounter video calls with obscure images, insistent requests, or technical excuses, hang up and confirm your identity another way. When in doubt, remember that There is no legitimate support that asks you for codes. not even if you see through your screen.
Keep the operating system and the updated apps, hide notification content on the lock screen, and strengthen voicemail with a strong PIN. These settings limit code exposure and other sensitive keys.
The combination of social engineering and the speed with which scammers act requires caution. Knowing their modus operandi, reacting quickly, and applying good security practices makes a difference when it comes to protecting your account and stopping new scams.