Fake Refund via Remote Access
INDIA — By BharatSecure Threat Intelligence Team ·
Verdict: Suspicious | Risk Score: 8/10 | Severity: high
How Fake Refund via Remote Access Works
Overview: This scam capitalizes on refund requests for failed orders, overcharges, or unauthorized transactions. Fraudsters pretend to be from a known e-commerce brand, bank, or customer care centre. They ask you to install a remote-control app so they can 'credit your refund' but end up accessing your bank or wallet apps to steal money. How It Works: 1. You get a phone call or WhatsApp message: "We're processing your refund. Need your cooperation." 2. The caller creates urgency, saying the refund will expire soon and you might lose money if you don't cooperate. 3. They instruct you to install AnyDesk, TeamViewer, or a similar app so they can 'help' process the refund. 4. Once connected, they direct you to log in to your bank or UPI app, claiming it's needed for the reversal. 5. They capture your credentials or use the session to transfer funds out of your account, sometimes using fake 'refund' forms set up on phishing sites. India Angle: This scheme targets frequent e-commerce shoppers, especially from urban and semi-urban cities. Calls often impersonate Amazon, Flipkart, Paytm, or Ola support, and use names common in India. The scam has surfaced in major cities like Delhi, Hyderabad, and Pune. Real Examples: - "Hello madam, I am Rahul from Amazon. We are refunding your Rs 899 purchase. Please share your screen for KYC." - WhatsApp: "Paytm wallet refund pending. Only 30 minutes left. Download this app, share the code." Red Flags: 1. Sudden call about an unexpected refund 2. Demands remote desktop/app installation 3. Asks for UPI or card details during the process 4. Refuses to process refund via email or official app Protective Measures: - Never entertain refund offers over the phone from unverified sources - Avoid installing remote apps for refunds—no legitimate company does this - Always verify with the platform's official website, not through links sent on SMS or WhatsApp - Disable screen sharing and end such calls immediately If Victimised: - Disconnect internet - Uninstall any remote-access apps - Change banking and wallet passwords - Contact your bank urgently - Report at 1930 and cybercrime.gov.in Related Scams: - E-commerce Job Offer Scam: Pretends to offer refunds or commissions with remote-access steps - Fake Payment Failure Scam: You’re told your payment failed and are guided into a remote session Be alert: Refunds never require remote access to your device.
How This Scam Works — Detailed Explanation
In today's digital age, scammers have devised increasingly sophisticated methods to defraud individuals, particularly in India where UPI transactions and online shopping have surged. The 'Fake Refund via Remote Access' scam often begins with a phone call or WhatsApp message claiming to be from a well-known e-commerce platform or bank. For example, a victim might receive a message saying, "We're processing a refund for your recent order that was uncertain. We need your cooperation to finalize it." These messages can appear genuine, often replicating the formal tone and style of recognized organizations.
As the conversation progresses, the caller creates an artifice of urgency. They might say things like, "This refund has a time limit; if you do not comply, you won't receive your money back." Psychological tricks such as playing on a victim’s fear of losing money or suggesting they will gain something easily contribute to compliance. The scammer then instructs the victim to download a remote access application, like AnyDesk or TeamViewer. These applications allow the scammer to take control of the victim's device, essentially tricking them into granting access to their banking or UPI applications.
Once the app is installed, victims are guided to log into their banking apps under the pretext of helping with the transfer of the refund. In many cases, the fraudster will ask them to click on buttons that ultimately lead to authorizing a transaction or revealing their UPI PIN. For instance, a victim from Bengaluru might receive a call stating they were owed ₹10,000 for a cancelled order and, following the instructions, end up losing their hard-earned money instead. Victims often realize too late how easily they were deceived, leading to financial and emotional distress.
The impact of such scams has been staggering in India. Reports suggest that in 2022 alone, close to ₹2,000 crores were lost to various online frauds, including fake refund scams. The Ministry of Home Affairs (MHA), the Reserve Bank of India (RBI), and The Indian Computer Emergency Response Team (CERT-In) have raised alarms over these issues, constantly advising citizens to remain vigilant. As the digitization of our economy progresses, the financial stakes for these scams become even higher, putting millions of Indians at risk.
To identify this type of scam versus legitimate communications, individuals should be wary of unexpected calls regarding refunds—especially if they have not claimed any. Legitimate organizations would typically not ask you to download software, especially third-party applications. Additionally, any call that prioritizes urgency and directs users to enter sensitive information should be approached with caution. Always verify refund claims directly with official customer care numbers instead of engaging with the individual directly for such requests.
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does Fake Refund via Remote Access Target?
General public across India
Red Flags — How to Identify Fake Refund via Remote Access
- Unexpected call about an urgent refund
- Told to install AnyDesk or TeamViewer
- Asked to log in to banking or UPI apps
- Caller refuses email or official channels
What To Do If You Encounter Fake Refund via Remote Access
- Report any suspicious call to the cybercrime helpline by dialing 1930 or visit cybercrime.gov.in.
- Do not engage with the caller; hang up if you feel uncomfortable or pressured.
- Verify refund claims by calling the official customer service number of the organization in question.
- Avoid installing any remote access applications to your device, regardless of how convincing the reasons may be.
- If you have already given access to your device, immediately contact your bank to secure your accounts.
- Change your UPI PIN and other sensitive passwords without delay to protect your accounts.
How to Report Fake Refund via Remote Access in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What to do if I shared my OTP in a UPI scam?
- Immediately contact your bank's helpline (e.g., SBI 1800-11-1109, HDFC 1800-202-6161) and inform them about the incident to take security measures.
- How can I identify this fake refund scam?
- Look out for unexpected calls claiming refunds, especially when asked to install apps or share sensitive banking details.
- How do I report this type of scam in India?
- You can report such scams by calling the cybercrime helpline at 1930 or by visiting cybercrime.gov.in to file an online complaint.
- What should I do to recover money after this scam?
- Contact your bank immediately to report any unauthorized transactions and request assistance in recovering your lost funds.
Related Scams in India
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.