Every character you type appears on their screen simultaneously.
The real scenario
Suresh, a retired government employee in Bhopal, Googled "SBI UPI customer care number" when his transaction kept failing. The top result showed a number that looked official. He called it. A polite, professional-sounding man answered and said: "Sir, there is a technical issue on your account. I can fix it remotely — please install AnyDesk from the Play Store, it takes 2 minutes." Suresh installed the app. The agent gave him a nine-digit code to enter. Within 90 seconds of granting access, Suresh watched helplessly as his phone navigated on its own — opening his SBI YONO app, adding a new payee, and initiating a ₹2.2 lakh transfer. He could not stop it. The call disconnected. The number was unreachable.
How does screen sharing become a weapon?
Remote access apps like AnyDesk, TeamViewer, and QuickSupport are legitimate tools used by IT support teams. But in the wrong hands, they give the scammer full, real-time control of your phone — every tap you make, every OTP that appears on screen, every digit of your PIN as you enter it.
The trap begins with a phone call. Scammers buy or scrape phone numbers from data leaks and call people who are likely to have banking issues — senior citizens, small business owners, and people who have recently complained on public forums. Alternatively, they pay for Google Ads or SEO to ensure their fake "customer care" number appears near the top of search results for terms like "PhonePe helpline," "SBI UPI problem," or "Paytm KYC support."
Once the victim installs the remote access app and shares the session code, the scammer sees a live mirror of the phone. They wait for the victim to open their banking app and then either watch credentials being entered or take direct control of the device. The entire fraud — from call to empty account — often takes under ten minutes.
🚩 Red flags to watch for
🚩
Any "support agent" asks you to install AnyDesk, TeamViewer, QuickSupport, or any other remote access or screen-sharing app. No legitimate bank or UPI support team ever requests this.
🚩
The customer care number you called was found via Google Search rather than directly on the bank's official website or the back of your debit card.
🚩
The agent asks you to open your banking or UPI app while you're on the call, claiming they need to "check something" or "run a diagnostic."
🚩
You receive OTP messages you did not request during the call — this means the scammer is already initiating transactions using information they've gathered.
✅ How to stay safe
✅
Never install apps on instruction: If anyone — regardless of how official they sound — asks you to install a new app while on a call, hang up immediately. This is the single most reliable sign of a scam.
✅
Get numbers from official sources only: Bank helpline numbers are printed on the back of your debit card and on the bank's official website. Do not use numbers found in Google search results — these can be paid ads from scammers.
✅
If you've granted access, act immediately: Uninstall the remote access app instantly. Put your phone in airplane mode. Call your bank's official helpline to freeze your account. File a complaint at cybercrime.gov.in within the hour.
✅
Tell elderly family members: Senior citizens are disproportionately targeted by this scam. Explain to your parents and grandparents that banks will never call them and ask for app installations. Show them this article.