loaderimg
image
Cyber Law

AnyDesk UPI Scam: How Screen Sharing Lets Fraudsters Access Your Money

Share this article WhatsApp Facebook X

Legal information notice: this article provides general information and isn't a substitute for advice from a qualified lawyer.

AnyDesk is a genuine, widely-used remote-support application — the problem isn’t the software itself, but how convincingly fraudsters use it to pose as legitimate support and drain a UPI-linked bank account in minutes. If you’ve installed AnyDesk on someone’s instruction and then lost money, here’s what’s actually happening and what to do now.

What AnyDesk Is Actually Built For

AnyDesk is a legitimate remote-desktop tool used by IT support teams worldwide to view and control a device with the user’s permission — genuinely useful for troubleshooting a laptop or phone issue. The scam doesn’t exploit a flaw in the software; it exploits trust, using a fake “customer care” call to convince you to install it and read out the 9-digit connection code yourself, at which point the fraudster has the same access a real support technician would.

How the AnyDesk UPI Scam Typically Plays Out

  • You search online for a bank, wallet, or e-commerce “customer care” number and reach a fraudulent one instead of the real one
  • The “agent” says a technical issue needs to be fixed remotely and asks you to download AnyDesk from the Play Store or App Store
  • You’re asked to read out the 9-digit AnyDesk code displayed on your screen — this is what grants them access
  • Once connected, they can see everything on your screen, including your UPI PIN as you enter it, and in some configurations can control the device directly

What to Do Right Now if This Just Happened

01
Uninstall AnyDesk Immediately
And disconnect from the internet
02
Call Your Bank's Official Helpline
Block card, UPI, and net banking
03
Change Passwords From a Different Device
Banking, email, and any app left open
04
Report on cybercrime.gov.in
Or call 1930
05
File a Written Complaint With Your Bank
List every unauthorized transaction
Step 1: Uninstall AnyDesk and Go Offline

Uninstall the app immediately and turn off Wi-Fi or mobile data on the device — this ends the fraudster’s live access right away.

Step 2: Call Your Bank Using the Number on Your Card

Report the incident and ask them to block your card, UPI, and net banking access immediately — use the official number printed on your card or passbook, never a searched-up one.

Step 3: Change Every Password From a Separate, Secure Device

Update your net banking password, email password, and any other account that may have been visible during the session, using a device the fraudster never had access to.

Step 4: File a Report on the National Cyber Crime Portal

Report at cybercrime.gov.in or call 1930 — quick action here materially improves the odds of a fund freeze at the receiving end.

Step 5: File a Formal Written Complaint With Your Bank

List every unauthorized transaction with exact date, time, and amount — this formally starts your dispute and the bank’s liability-assessment timeline.

Need Legal Help? Get expert legal help from experienced professionals with ApniLaw legal services across India. Advertisement

Never read out an AnyDesk (or any remote-access) connection code to someone who called you, or whose number you found via search rather than an official source — sharing that code is functionally the same as handing someone your unlocked phone and stepping away, regardless of how convincing or official the caller sounds.

Need Immediate Legal Help?

Get Legal Help from ApniLaw Sponsored

Legitimate Remote Support vs the AnyDesk Scam

How to Tell Them Apart

Legitimate SupportScam Pattern
You initiated contact through a verified, official channelYou called a number found via a general search result or ad
Used for an actual device/software issue you're already troubleshootingUsed specifically to 'fix' a payment, refund, or KYC issue
Never requires you to enter your UPI PIN while they're connectedKeeps you on the line while you enter your PIN, watching in real time

Does It Cost Anything to Report This?

No. Reporting to your bank and on cybercrime.gov.in are both free of charge.

Can You Do This Without a Lawyer?

Yes, for the immediate securing and reporting process. A lawyer becomes relevant if your bank denies liability despite prompt, well-documented reporting.

What Happens After You Report?

  • Your bank investigates the incident and assesses liability under RBI’s rules on unauthorized electronic transactions
  • A prompt cybercrime.gov.in report can trigger a fund freeze at the receiving bank before withdrawal
  • Provisional credit is expected within 10 working days for a properly and promptly reported case
  • Cases unresolved after 30 days can be escalated to the RBI Banking Ombudsman

Need professional legal help with this?

Find a Lawyer on Vidyoday

This exact tactic is used across many different remote-access apps, not just AnyDesk — see our broader guide on UPI fraud through screen sharing apps for the general pattern. If the call started with a fake support number, see our guide on the fake customer care number scam.

Key Takeaways

  • AnyDesk itself is legitimate software — the scam relies entirely on impersonating official support to get you to install it and share the access code.
  • Never read out a remote-access connection code to anyone whose contact you didn’t verify through an official channel.
  • Uninstall the app and disconnect from the internet the moment you suspect anything is wrong — don’t wait for the call to end.
  • Use only the customer care number printed on your card or passbook, never one found via a general online search.

Frequently Asked Questions

No — it’s a legitimate, widely-used remote-support tool. The risk comes entirely from who you grant access to, not the app itself.

It’s AnyDesk’s own connection code that grants remote access to your device — reading it out to someone is equivalent to letting them control your screen directly.

No — uninstalling the app ends the remote session and any future access through it, though you should still secure your accounts since your PIN may already be compromised.

Fraudsters tend to favor whichever legitimate remote-access tool is easiest to talk a victim through installing — TeamViewer and Quick Support are used in similar scams too.

It depends on how quickly you reported it — prompt reporting to your bank and cybercrime.gov.in significantly strengthens your case, even though you installed the app yourself under deception.

Not necessarily — it’s safe when used with support you’ve independently verified through official channels. The rule is about who you grant access to, not the tool itself.

Still report it immediately — a connected session can potentially observe other sensitive information even without a PIN entry, and it’s better to secure your accounts as a precaution.

Vidyoday
Vidyoday Editorial Team
Cyber Law & Banking Disputes
Reviewed and published by Vidyoday.
Disclaimer:

This article is for general information only and does not constitute legal or financial advice. Scam tactics and bank policies can change — verify current guidance with your bank or on rbi.org.in before relying on this for a real dispute.

Leave a Comment