FBI Issues Urgent Warning: New iPhone and Android Scam Drains Bank Accounts Instantly
Here are the top 5 things you need to know about this.
- The scam, dubbed "phantom SMS drain," uses fake text messages that look like they're from your bank, complete with official logos and links. The FBI reports that clicking the link can grant hackers instant access to your mobile banking credentials and transaction history.
- Victims are losing an average of $3,800 in under 10 minutes. The malware doesn't just steal passwords—it intercepts two-factor authentication (2FA) codes sent via text, bypassing your primary security layer.
- The FBI advises you to never click links in unsolicited texts. Instead, manually type your bank's URL into your browser or use its official app. If you get a suspicious message, forward it to 7726 (SPAM) for free.
- iPhone and Android devices are equally vulnerable. The FBI warns this exploit targets both operating systems by exploiting a common SMS parsing flaw. Even tech-savvy users have been tricked because the messages clone real previous conversations.
- Immediate action if bitten: Call your bank, freeze your accounts, and file a report with the FBI's IC3 (Internet Crime Complaint Center) online. Do not reset your phone until law enforcement advises it, as evidence is critical for tracking the criminal network.