A TikTok video can install malware that steals bank accounts in seconds

According to the official alert, the identified videos can be found on various platforms, although the most prominent presence has been detected on TikTok

10 of january of 2026 at 14:55h
A TikTok video can install malware that steals bank accounts in seconds
A TikTok video can install malware that steals bank accounts in seconds

The Cyber Police of the Secretariat of Citizen Security of Mexico City has issued an alert about the proliferation of videos on TikTok promoting tutorials to activate paid programs and services for free. Authorities warn that these contents, which appear harmless, actually install malicious software capable of stealing passwords and personal data.

Warning about videos on TikTok and other platforms

According to the official alert, the identified videos can be found on various platforms, although their most prominent presence has been detected on TikTok. The app, widely used in neighborhoods of Barcelona, Girona, and Tarragona, has established itself as one of the most influential among young people and adults due to its short and dynamic video format.

The Cyber Police Unit points out that these tutorials often show seemingly reliable instructions, backed by careful editing and supposed functional tests. However, the code they invite users to copy and execute compromises device security.

Digital Security Risks for Users

The instructions spread in these videos modify the operating system, disable security protections, and allow the download of programs designed to steal information. Once installed, malicious programs can infiltrate browsers, password managers, and messaging applications.

"In a matter of seconds, cybercriminals can gain access to sensitive information, such as bank accounts, emails, social media, and other platforms used by the victim, which increases the risk of fraud, identity theft, and financial losses" - Spokesperson, Cyber Police

Authorities emphasize that cybercriminals use fake profiles, manipulated comments, and professionally edited videos to appear as trustworthy sources. The use of illegal activators for paid programs and the download of pirated software are among the main infection routes.

Recommendations and reporting channels

The agency has issued a list of precautions to prevent users from falling victim to digital theft. Among the recommendations are not downloading or executing code from unknown sources and avoiding interaction with suspicious profiles on social media.

  • Do not download paid programs from unofficial links
  • Avoid following instructions from videos that promise free activations
  • Check the authenticity of profiles and comments on social media
  • Regularly update device security systems

Complaints can be filed directly with the Cyber Police Unit by calling 55-52-42-51-00, extension 5086, or via email at [email protected].

The alert remains active as investigations continue into the dissemination of these malicious tutorials on digital platforms.