Inside the Video Call Scam: Real Evidence Exposes How Callers Steal Verification Codes
By Elena Rostova
Most users believe that two-factor authentication (2FA) via SMS provides a solid barrier against unauthorized access. In standard situations, it does. If a bad actor in another country buys your password on the dark web, they cannot breach your account without physical access to your phone.
The screen-sharing exploit completely circumvents this barrier.
By manipulating the account holder into initiating the broadcast, the attacker gains direct visual observation of the second factor. Once the six-digit string flashes on the screen, the authentication loop closes. The scammer enters the code, logs into the account on their hardware, and instantly sets a custom registration PIN inside WhatsApp's settings.
This supplementary step seals the victim out. Even if the victim realizes what happened seconds later and requests a new code via text message, the platform will prompt them for the six-digit PIN created by the intruder. Regaining access can take days through manual customer support channels, ample time for criminals to message the victim's contacts demanding emergency loans or draining linked digital wallets.
Elena Rostova holds a Master's degree in Public Health Journalism. She covers groundbreaking medical research, holistic wellness trends, mental health awareness, and nutritional science.
