
FaceTime Spoof Calls Steal Codes and Money
Apple warns that scammers are using FaceTime calls, often with spoofed caller ID, to impersonate Apple or banks and pressure people into sharing passwords,…
Police say an organized crime group ran around 20 fraudulent call centers with over 700 staff who posed as “financial advisers” to trick people into fake investments. Victims were contacted by phone and online for weeks or months, shown fake profits on fraudulent trading platforms, then pressured to deposit larger amounts, often in cryptocurrency. Authorities also warned that “recovery companies” offering to get money back may be part of the same scam network.
According to police, an organized crime group ran roughly 20 call centers staffed by more than 700 people who posed as financial advisers. These agents contacted victims by phone and online, sustaining relationships over weeks or even months to build trust before introducing an investment opportunity. Once a victim made an initial deposit, they were shown fabricated profits on trading platforms specifically designed to display fake returns. Believing their investment was succeeding, victims were then encouraged to deposit larger sums, often in cryptocurrency, which is harder to trace and recover.
A second layer of the scheme targeted people after they had already lost money. Police warned that so-called recovery companies offering to retrieve lost investment funds in exchange for an upfront payment may in fact be part of the same fraudulent organization, effectively victimizing people a second time.
The scam's effectiveness came from patience and manufactured credibility rather than technical sophistication. Building rapport over an extended period allowed the fraudsters to establish trust before asking for money. The fake trading dashboards gave victims tangible, visible evidence of "success," which made it easier to justify larger deposits. The follow-on recovery company pretext exploited the emotional aftermath of a loss, when victims were most motivated to act quickly to get their money back.
Employees and consumers should treat unsolicited investment outreach as high-risk by default and independently verify any firm through a regulator registry or a known, previously verified contact number rather than one provided by the caller. Skepticism toward on-screen "profits" is essential, especially when combined with requests for additional deposits or cryptocurrency payments. Organizations should also make clear that legitimate recovery of lost investment funds does not require paying an upfront fee to a third party, and that such cases should be routed to legal, compliance, or law enforcement channels rather than handled informally. Building this awareness across finance teams and leadership, not just general staff, is important since these roles are often specifically targeted given their access to funds and investment decisions.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
Fraudsters posing as financial advisers contacted victims by phone and online over weeks or months to build trust, then showed them fake returns on fraudulent trading platforms before pushing for larger deposits, often in cryptocurrency.
Police warned that so-called recovery companies offering to retrieve victims' lost investment funds for an upfront fee may actually be part of the same criminal network, targeting people a second time.
Police say the group operated around 20 call centers staffed by more than 700 people posing as financial advisers.
Unsolicited investment outreach, pressure to deposit larger sums after seeing on-screen profits, and requests to pay in cryptocurrency are all warning signs, as is any request for an upfront fee to recover lost funds.
Imagine a ‘financial adviser’ calling you, one of 700 people in a fake call center stealing over €100 million a month. They call for weeks, sound legit, then say: “Can you log into our trading platform? Look, you’re already in profit.” The dashboard shows fake returns, then they push you to “just add more”, often in crypto. Then comes the sequel scam: a ‘recovery company’ calls about your loss, “We can get it back, but we need an upfront fee.” Same network, second hit. Your move: if anyone cold-calls you about investments or recovering losses, hang up, and call the firm back using a regulator-listed number or our compliance team’s number you already trust.

Apple warns that scammers are using FaceTime calls, often with spoofed caller ID, to impersonate Apple or banks and pressure people into sharing passwords,…

Researchers tested AI and human voice scam calls and found people comply mainly because the caller’s script is persuasive, not because the voice sounds…

This roundup describes several real-world social-engineering and human-abuse techniques, including trojanized “installer” lures (ClickFix), large-scale…

Apple warns that scammers are placing unsolicited FaceTime calls and sending urgent-looking messages that appear to come from “Apple Support” or a bank. The…

UK authorities charged five people linked to “Russian Coms,” a vishing (phone-scam) platform used to make large volumes of spoofed calls that appeared to come…

This bulletin describes multiple real-world social engineering campaigns where attackers trick people into trusting a familiar screen, like a search result…