A new cybercrime scam is spreading online through a fake link claiming to show a “viral 19-minute video.” This is a classic social-engineering trick that uses curiosity and FOMO to trap victims. The link, often shared on WhatsApp, Telegram, or social media, does not open any video.
Instead, it triggers a series of hidden attacks that install a banking trojan on your phone. The goal is simple: steal permissions, monitor your banking activity, grab security codes, and ultimately drain your bank account.
How the 19-Minute Video Scam Works
Cybercriminals use digital phishing and clickbait to lure users. When you tap the link, you’re taken through fake pages filled with ads and deceptive buttons. Any interaction—pressing “play,” accepting a permission, or clicking a pop-up—can silently download malware onto your device.
This malware often hides as a harmless app and requests Accessibility Service permissions, giving it almost full control over your phone.
What the Banking Trojan Does
Once inside your device, the trojan waits for you to open your banking app. It then displays a fake login screen that looks identical to the real one. Everything you type—passwords, PINs, card details—goes straight to the attacker.
Even worse, the malware can intercept SMS OTPs, allowing criminals to bypass two-factor authentication and make unauthorized transactions, emptying your account without you noticing.
How to Stay Safe
The best protection is simple:
Never click on unknown or sensational links—especially those promising “viral videos.”
If something looks too tempting or shocking to be true, it’s probably a trap.