Remote Access App Fraud via UPI Support
INDIA — By BharatSecure Threat Intelligence Team ·
Verdict Summary
Remote Access App Fraud via UPI Support shows strong scam indicators common in fraud targeting Indian users. Do not share OTPs, passwords, or payments — verify the source independently.
Risk score: 9/10 · Severity: Critical · Verdict: Suspicious
Scam Intelligence: Remote Access App Fraud via UPI Support
Proprietary signals from BharatSecure's scam-tracking database.
| Last reported | Apr 22, 2026 |
How Remote Access App Fraud via UPI Support Works
Overview: A dangerous scam is circulating where fraudsters impersonate Paytm, PhonePe, or GPay support and trick users into installing remote control apps for supposed 'security updates'. These attacks have spiked after the April 2026 UPI rule changes, exploiting worries over transaction errors and high-value transfers being delayed. Victims grant scammers device access, who then authorise fraudulent money transfers. How It Works: The scam typically begins with a call or WhatsApp message, where the fraudster claims you need to update your app or fix a security issue. They direct you to install a remote access application—often disguised as 'support tools'—via a link sent in chat. Once installed, the scammer asks you to start screen-sharing, under the pretext of fixing your complaint or enabling new UPI features. Now in control, they guide unsuspecting users to enter their passwords, UPI PINs, or OTPs, allowing the fraudster to conduct unauthorized transactions. Some also scan QR codes or approve payments themselves while controlling the victim’s screen. India Angle: This scam preys on high UPI usage in urban and Tier 2 cities, and is spreading through WhatsApp and SMS, often in Hinglish or local languages. Individuals uncomfortable with technology, senior citizens, and busy business owners are particularly vulnerable. The attackers often reference recent RBI rules and genuine-seeming technical details to appear credible. Real Examples: - "Sir, there is a 2FA delay affecting your Paytm. Kindly install our support app by clicking this WhatsApp link. I will help you fix it." - "Madam, for new PhonePe security, please start this app and share your screen. Enter PIN when I say." Red Flags: - Requests to download unfamiliar apps via WhatsApp/SMS. - Demands for screen-sharing during support calls. - Being hurried through PIN/OTP entry on call. - Sudden high-value transactions appearing during support call. Protective Measures: - Never install remote access apps unless instructed by a known, trusted source. Official support staff will never ask for such installations. - Download and update your UPI app only from recognised app stores. - Refuse all requests for screensharing or device control during calls. - Regularly check your UPI transaction history for any suspicious activity. If Victimised: - Disconnect your phone from the internet immediately and uninstall the suspicious app. - Contact your bank and lock your UPI account. - Report the case to the 1930 helpdesk and cybercrime.gov.in. - Change all PINs and passwords for online banking and UPI apps. Related Scams: - Screen-sharing frauds in the guise of technical support. - QR code scams paired with remote access. - KYC update requests directing you to third-party app downloads.
How This Scam Works — Detailed Explanation
Scammers often target vulnerable individuals in India by reaching out through calls or WhatsApp messages, pretending to be customer support representatives from popular UPI platforms such as Paytm, PhonePe, or Google Pay. Typically, this begins with someone receiving an unsolicited call or message that claims to offer assistance with a recent transaction issue, which has been a major concern following the UPI rule changes implemented in April 2026. The victims are often anxious about potential transaction failures or delays and are more susceptible to manipulation. The scammers utilize a multitude of platforms for their operations, taking advantage of the pervasive nature of mobile communication in India to create a sense of urgency and build trust quickly.
The tactics employed by these fraudsters are particularly deceptive and exploit numerous psychological tricks to con their victims. Once they establish contact, they pressure users into believing that their UPI app has been compromised or requires immediate maintenance. They then instruct individuals to download remote access applications—like AnyDesk or TeamViewer—under the guise of conducting a security check. The scammers often assert that it’s a security procedure, cultivating an image of legitimate intervention. Pressure tactics, such as creating a false sense of urgency and otherwise making the user feel unsafe about their financial information, are commonly employed. Victims may even be persuaded to share their Personal Identification Number (PIN) or One-Time Password (OTP) during these conversations, which the scammers then use to execute fraudulent transactions.
Once the victim has granted access to their device through the remote access software, the scammer assumes control of their phone and can manipulate it as needed. Step-by-step, this process generally looks like this: the victim receives a call claiming to be from UPI support, is pressured to download a remote access app, and is then led to share security credentials. For instance, someone from Uttar Pradesh reported losing ₹2.5 crore to such a scam when they were convinced to authorize high-value fund transfers, believing they were resolving a genuine issue with their account. The scammer, having gained access, triggers numerous transactions within minutes, leaving the victim in disbelief as their bank account balance dwindles.
The real-world impact of Remote Access App Fraud via UPI support has been staggering. According to recent cybersecurity reports, scams like these have caused losses of over ₹500 crore across India in the past two years alone. With the Ministry of Home Affairs (MHA), Reserve Bank of India (RBI), and CERT-In regularly issuing advisories highlighting these trends, it’s clear that the threat is severe. The scammers are elusive, taking advantage of the maximum anonymity that digital services offer and often targeting people in the most vulnerable demographics, such as the elderly and those unfamiliar with digital banking.
When it comes to distinguishing between these scams and legitimate communications, there are undeniable red flags to watch out for. If you receive unsolicited communication requesting you to download an app for purported support, that's a significant warning sign. Scammers often use WhatsApp or SMS links for quick installations, both things that legitimate UPI services never do. Be very wary of callers who press you for screen-sharing or push you to enter your PIN or OTP while on the call. Always remember that no credible financial institution will ask you to compromise your security in such a brazen manner. The safest route is to always verify the call back through official customer service numbers before taking any actions suggested by the caller.
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does Remote Access App Fraud via UPI Support Target?
General public across India
Red Flags — How to Identify Remote Access App Fraud via UPI Support
- Unsolicited requests to download apps for 'support'
- WhatsApp or SMS links for quick installation
- Callers pressuring for screen-sharing
- PIN or OTP entry while on call
- Transactions triggered during remote session
What To Do If You Encounter Remote Access App Fraud via UPI Support
- Report the incident immediately to the cybercrime helpline at 1930
- Contact your bank's customer support to freeze your account
- Change your app passwords and secure your accounts with two-step verification
- Uninstall any remote access software that you may have downloaded
- Inform friends and family about the incident to warn them
- Regularly monitor your bank statements for unauthorized transactions
How to Report Remote Access App Fraud via UPI Support in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What to do if I shared my OTP in a UPI scam?
- Contact your bank immediately at their helpline (e.g., SBI 1800-11-1109) to report the issue and request to block your account. Also, report the incident through 1930 or cybercrime.gov.in.
- How can I identify the Remote Access App Fraud?
- Look for unsolicited requests to download apps from unfamiliar callers. Legitimate customer service will never ask you to share access to your device.
- How to report this type of scam in India?
- Report the scam to the cybercrime helpline at 1930 or through cybercrime.gov.in. Also, contact your bank to block any unauthorized transactions.
- What recovery steps should I take after this scam?
- Change your banking passwords, freeze your accounts with your bank, and file a report with law enforcement or cybercrime helplines.
How This Scam Works — BharatSecure AI
Spreading fastA plain-language breakdown based on 87 real reported scams of this type.
| How they reach you | Unsolicited contact via WhatsApp messages/calls, SMS, and phone calls (vishing) is the dominant first-touch channel, frequently delivering malicious payment links, fake QR codes, or disguised UPI coll |
| How they gain your trust | Scammers establish credibility through impersonation of trusted authorities — bank officials, payment-app customer support, government schemes (RBI, PM-Kisan, income tax), or known relatives/friends — |
| How they take your money | UPI is the universal rail across all 87 records — exploited via collect requests where entering a PIN sends rather than receives money, malicious paym |
| Who they target | Targeting is broad-spectrum but with documented concentration on the elderly (digital unfamiliarity, dependency on caregivers), rural users and farmers (government-scheme pretexts), students and young |
- Urgency/scarcity bias — account deactivation, KYC expiry, or suspicious-transaction panic forcing immediate action
- Authority bias — deference to bank, RBI, government, or army-officer personas
- Trust-by-familiarity — cloned voices, family impersonation, and recognised brand logos exploit relational trust
- Greed/reward anticipation — cashback, prizes, refunds, trading profits, and 'receive money' framing that inverts the payment direction
- A UPI PIN is requested or required to 'receive' money — entering a PIN always sends money, never receives it
- Unsolicited calls/messages claiming urgent account, KYC, or transaction issues from 'bank officials', 'customer support', or government bodies
- Requests to install remote access or screen-sharing apps (e.g., AnyDesk/TeamViewer-type tools) to 'fix' a problem or process a refund
- UPI ID or display name mismatches — slightly altered VPAs, extra characters, or misleading names like 'Verified Merchant' or 'Bank Refund Dept'
- Pressure to scan unknown QR codes or click payment links sent via WhatsApp/SMS, often paired with prize, cashback, refund, or grant offers
Related Scams in India
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.