Still developing

App-Based Screen Sharing/Remote Access Scams (OTP Fraud)

ऐप-आधारित स्क्रीन शेयरिंग/रिमोट एक्सेस घोटाले (ओटीपी धोखाधड़ी)

INDIA — By BharatSecure Threat Intelligence Team ·

Dangerous Risk: 10/10 Severity: Critical BharatSecure Threat Intelligence

Category: OTP/Bank/Phishing

Evidence & AI transparency

Still developing. We are still adding sources for this report. Treat it as unconfirmed until it is checked with an official source.

This page includes AI-assisted analysis. AI assistance does not mean a person reviewed or approved this page.

Sources: 0 · Last automated validation: Not recorded

Evidence-backed facts: statements mapped to cited evidence by the automated validator. BharatSecure analysis: interpretation and safety guidance; it is not an official finding.

Automated analysis can contain errors. Confirm important information and decisions with official authorities.

Report an error or suggest a correction

Verdict Summary

App-Based Screen Sharing/Remote Access Scams (OTP Fraud) is a confirmed scam. Do not engage — block the sender and report to 1930 (National Cyber Crime Helpline) immediately.

Risk score: 10/10 · Severity: Critical · Verdict: Dangerous

Scam Intelligence: App-Based Screen Sharing/Remote Access Scams (OTP Fraud)

Proprietary signals from BharatSecure's scam-tracking database.

Last reportedSep 08, 2026
First documentedSep 08, 2026

How App-Based Screen Sharing/Remote Access Scams (OTP Fraud) Works

  1. Scammer calls/SMS, posing as bank/e-commerce/telecom support.
  2. Claims to verify account, resolve issue, or process refund.
  3. Persuades victim to download remote access app (AnyDesk, TeamViewer) from unofficial sources or app stores.
  4. Victim grants screen-sharing or remote control permissions.
  5. Victim is instructed to initiate a transaction or log into banking app.
  6. As victim enters OTP, scammer intercepts it via screen view or remote control.
  7. Scammer executes unauthorized transactions or asks for banking credentials.

How This Scam Works — Detailed Explanation

Scammers often target victims through unsolicited calls or SMS messages pretending to be from banks, government agencies, or even reputable tech support teams. In India, they frequently leverage well-known brands or local bank services like SBI, HDFC, or popular e-commerce sites to gain trust. They might initiate contact through WhatsApp, luring victims into a deceptive conversation. Scammers use automation or manual dialing to reach potential victims, selecting numbers from publicly available databases or social media profiles. They may use caller ID spoofing to make it appear as though they are calling from a trustworthy source, which adds a layer of legitimacy to their con.

Once they establish contact, scammers employ various psychological tricks to manipulate their victims. These tactics include creating a faux sense of urgency, stating that the victim's bank account is compromised or experiencing unauthorized activity. They might claim they are calling to assist with a refund when customers have had prior transactions with their bank. By fostering panic or confusion, they make it more likely that the victim will comply with their demands. They often promise that quick action can prevent account issues, effectively pressuring victims into making unwise decisions under stress.

The step-by-step process that victims undergo is alarming. Initially, the scammer convinces the victim to download a remote access application like AnyDesk or TeamViewer, which allows them to control the victim's screen. For instance, an individual might receive a call from someone pretending to be a bank representative, assuring them they need to verify their Aadhaar or bank details urgently. Through scripted dialogue, they will ask the victim to download the application from a non-official source. Soon after installation, the victim unknowingly grants these fraudsters full control over their screens. At this point, scammers can access SMS messages, including One-Time Passwords (OTPs), and use these to complete unauthorized UPI transactions or transfer funds from the victim’s account directly.

The real-world ramifications of these scam tactics are frightening. Statistics show that in India, several crore rupees have been lost due to these scams. In fact, according to reports from the Ministry of Home Affairs (MHA) and the Reserve Bank of India (RBI), millions are defrauded each year, with CERT-In regularly issuing advisories to raise awareness about rising phishing scams. Several recent cases highlighted losses upwards of ₹100 crore in single quarters, as victims struggle to recover their funds. By 2023, the scenario has worsened, leading to an increased demand for guidelines on how to effectively safeguard against these threats.

To identify and distinguish genuine communications from scams, it is crucial to be vigilant. Legitimate banks or customer support services never ask for OTPs, passwords, or to install remote access software during unsolicited communications. If a caller or message prompts urgent or emotionally charged responses regarding your financial information, take a moment to verify the source. Hang up and call the official customer service number of your bank, such as SBI at 1800-11-1109 or HDFC at 1800-202-6161, instead of relying solely on the information provided to you during the call. This kind of caution can help you differentiate between a legitimate customer support inquiry and an elaborate scam scheme.

Who Does App-Based Screen Sharing/Remote Access Scams (OTP Fraud) Target?

Bank customers, e-commerce users, anyone with a smartphone and bank account.

Red Flags — How to Identify App-Based Screen Sharing/Remote Access Scams (OTP Fraud)

  • Unsolicited calls/SMS from 'banks' or 'customer support' asking to download apps.
  • Requests to grant screen sharing or remote control access.
  • Being asked for OTPs or banking credentials over the phone or after app installation.
  • Claims of urgent account blocking or large refunds requiring immediate action.

What To Do If You Encounter App-Based Screen Sharing/Remote Access Scams (OTP Fraud)

  1. Report the incident immediately by calling the cybercrime helpline at 1930 or visiting cybercrime.gov.in.
  2. Verify any unsolicited communication by directly contacting your bank through official channels.
  3. Do not download any application or grant access unless you are sure it is safe.
  4. Change your banking passwords and enable two-factor authentication for extra security.
  5. Monitor your bank statements closely for any unauthorized transactions.
  6. Educate friends and family about this scam to help them avoid being targeted.

How to Report App-Based Screen Sharing/Remote Access Scams (OTP Fraud) in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I shared my OTP in an OTP/Bank/Phishing scam?
Immediately contact your bank’s customer service. For SBI, call 1800-11-1109; for HDFC, call 1800-202-6161. Change your account passwords and report the incident to 1930.
How can I identify this specific app-based screen sharing scam?
Be cautious of unsolicited calls that instruct you to download remote access apps or request OTPs for account verification.
How do I report this type of scam in India?
You can report scams to the cybercrime helpline at 1930 or file a complaint online at cybercrime.gov.in. Also, inform your bank immediately.
Can I recover money or protect accounts after falling for this scam?
Contact your bank urgently to freeze your accounts and potentially reverse unauthorized transactions. Always monitor your accounts closely afterward.
🛡️

How This Scam Works — BharatSecure AI

Spreading fast

A plain-language breakdown based on 94 real reported scams of this type.

How they reach you Multi-channel social engineering (SMS/WhatsApp smishing, unsolicited calls, fake links, malicious APKs) impersonating trusted entities (banks, telecom providers, government agencies, e-commerce platfo
How they gain your trust Scammers establish false authority by impersonating legitimate institutions and create artificial time pressure through claims of imminent account closure, security threats, or expiring benefits. They
How they take your money Bank account transfers (UPI, NEFT, IMPS), digital wallets (PayTM, Google Pay, PhonePe), unauthorized transactions via intercepted OTPs, loan disbursal
Who they target Broad demographic targeting observed: elderly and senior citizens (voice cloning, KYC scams), homemakers (delivery and KYC fraud), small business owners, students, professionals, and general urban/rur
How they manipulate you
  • Urgency and scarcity (account will be blocked, service suspended, limited-time offer)
  • Authority bias (impersonation of banks, government, telecom officials)
  • Social proof and legitimacy (reference to real transactions, delivery tracking, official-sounding processes)
  • Fear of loss (account compromise, financial penalty, service disruption)
  • Reciprocity and helpfulness (victim believes they are assisting with legitimate verification)
Warning signs
  • Unsolicited calls/SMS from 'official' entities requesting OTP, PIN, or CVV—legitimate institutions never ask for these
  • Pressure to download remote access apps (AnyDesk, TeamViewer, unofficial app store versions) or malicious APKs under guise of support or verification
  • Requests to dial USSD codes (*21*#, *401*#) or perform phone actions that enable call forwarding, SMS redirection, or SIM swap initiation
  • Fake links in SMS/WhatsApp/email that mimic banking or e-commerce portals; hyper-realistic phishing sites designed to capture credentials and OTPs
  • Caller claims to merge calls with 'senior desk' or 'verification team' to create false legitimacy; requests to read out OTP 'for confirmation' or 'to complete transaction'

Status: Still developing

We are still adding sources. This pattern has not yet been matched to credible published sources, so treat it as unconfirmed.

References

Source research is pending. No independently checked references are currently available for this page.

Related Scams in India

Verify Any Suspicious Message

Check any suspicious message, link, or call at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.