By simply convincing users to install remote-access apps, cybercriminals can watch their screens, manipulate transactions and trick them into authorising payments. Here’s how the scam works and how to stay safe.
Screen-sharing scams are emerging as a dangerous route to digital payment fraud, with cybercriminals exploiting trust rather than directly breaking into banking systems.
In these scams, fraudsters often pose as bank officials, customer-care executives, delivery agents or representatives of online platforms. They contact victims with seemingly legitimate reasons such as a pending refund, KYC update, failed payment or service verification.
The victim is then persuaded to install a remote-access or screen-sharing application. Once access is granted, the fraudster may be able to view activity on the device and, depending on the permissions provided, interact with applications and manipulate what the victim is doing.
The Indian Computer Emergency Response Team (CERT-In) has warned that remote-access applications can be misused to gain access to devices and facilitate financial fraud.
How The Screen-Sharing Scam Works
1. The Fraudster Makes Contact
The scam usually begins with an unsolicited call, text message or online interaction.
The fraudster creates a sense of urgency by claiming that the victim has a pending refund, an account or KYC issue, a failed transaction or a problem with a service.
2. A Remote-Access App Is Suggested
The victim is instructed to download an app that allows remote access or screen sharing.
The request may appear genuine because the fraudster presents the application as a tool for providing technical assistance.
3. The Victim Grants Access
Once the victim installs the application and provides the requested permissions, the fraudster may be able to see activity on the phone.
This can expose sensitive information displayed on the screen and, depending on the permissions granted, allow the scammer to interact with the device.
4. The Victim Is Guided Towards A Payment
The fraudster then walks the victim through what appears to be a routine process.
The victim may be asked to open a UPI app, check a refund, complete a verification or initiate a transaction.
Under the guise of completing the process, the scammer may manipulate the victim into approving a payment or entering sensitive banking information.
5. Money Is Transferred
A UPI PIN is used to authorise a payment, not to receive money.
If a victim enters the PIN while being guided by a scammer, a transaction can be authorised and money may leave the account.
Why These Scams Work
Screen-sharing scams rely heavily on social engineering.
Instead of trying to bypass a bank’s security directly, fraudsters convince victims to perform actions themselves. Impersonation, urgency and fake customer-support scenarios are commonly used to make the request appear credible.
The presence of a seemingly legitimate app can also make the interaction feel safer, even though the real danger lies in giving an unknown person access to the device.
How To Protect Yourself
- Never install a remote-access or screen-sharing app because an unsolicited caller asks you to.
- Never share your UPI PIN, OTP, password or banking credentials with anyone.
- Remember that you do not need to enter your UPI PIN to receive money.
- Do not allow an unknown person to guide you through a financial transaction over a screen-sharing session.
- Contact your bank only through its official app, website or verified customer-care number.
- Do not trust customer-care numbers found through random internet searches or sent by unknown callers.
- Keep your phone and banking applications updated and review app permissions regularly.
Already Installed A Suspicious App? Act Quickly
If you have accidentally installed a remote-access application or allowed an unknown person to access your device, immediately disconnect the remote session and remove the suspicious application.
Contact your bank through an official channel, monitor your accounts for unauthorised transactions and secure your banking credentials.
If money has already been lost in a cyber fraud, report the incident to the relevant authorities as soon as possible. In India, financial cyber fraud can be reported through the 1930 cybercrime helpline and the government’s cybercrime reporting system.
The Bottom Line
A genuine bank or customer-care representative does not need remote control of your phone to help you receive a refund or resolve a routine banking issue.
If someone asks you to install a screen-sharing app and then guides you through a UPI transaction, stop the call. It could be a scam.
