Legal information notice: this article provides general information and isn't a substitute for advice from a qualified lawyer.
You called what you believed was customer care, they asked you to install an app to “verify” or “fix” an issue, and once you did, your bank account was emptied. Screen-sharing fraud is one of the most damaging UPI scams precisely because you willingly install the app yourself — here’s exactly how it works and how to recover if it’s happened to you.
The scam almost always starts with a fake problem: a failed transaction, a refund that “needs verification,” or a KYC update. You’re directed to a fake or genuinely compromised customer-care number (often found via a general search rather than the bank’s own website), and the “agent” asks you to install a remote-access app like AnyDesk, TeamViewer, or Quick Support to “resolve” the issue. Once installed and you share the access code, the fraudster can see your entire screen in real time — including any UPI PIN or OTP you enter — and can, in some cases, control the device directly.
Uninstall the remote-access app and turn off your device’s Wi-Fi or mobile data right away — this cuts off the fraudster’s live access to your screen.
Report that your account was accessed via a screen-sharing scam and ask them to block your card, UPI access, and net banking immediately, using the number on your card or passbook, not one you searched for.
Using a separate, secure device, change your net banking password, email password, and any other account the fraudster may have glimpsed during the session.
File at cybercrime.gov.in or call 1930 — this is critical for triggering a possible fund freeze at the receiving end before the money is withdrawn.
List every unauthorized transaction with date, time, and amount in a formal written complaint — this starts your dispute and liability-protection timeline officially.
Legitimate bank or company support will never ask you to install a remote-access/screen-sharing app to resolve a payment issue — this single fact is the clearest red flag available, and worth remembering even after the fact, since the same tactic is often repeated on a second call once a fraudster knows a number is responsive.
| Genuine Support | Common Scam Pattern |
|---|---|
| Never asks you to install a remote-access app for a payment/refund issue | Insists a remote-access app is needed to 'verify' or 'fix' something |
| Directs you to official channels found on the bank/company's own website | Provides a number to call, often found via a sponsored search result |
| Never asks you to read out or enter your PIN/OTP while they watch | Creates urgency and stays on the line while you enter sensitive details |
No. Reporting to your bank and on cybercrime.gov.in are both free.
Yes, for the immediate securing and reporting steps. A lawyer becomes relevant if your bank denies liability despite prompt reporting, or if the amount involved is significant and resolution stalls.
Need professional legal help with this?
Find a Lawyer on VidyodayAnyDesk specifically is the most commonly abused app in this exact scam — see our dedicated guide on the AnyDesk UPI scam for app-specific detail. If the call started with a fake customer-care number, see our guide on the fake customer care number scam.
No — these are legitimate remote-support tools widely used for genuine technical support. The danger is sharing access with someone impersonating official support, not the app itself.
Screen-sharing gives them a live view of your screen as you type, so they can see your PIN entered directly, without you ever having to say it out loud.
Hang up, uninstall the app, and disconnect from the internet immediately — don’t wait until the call ends naturally.
It depends on how quickly you reported it and the specific circumstances — prompt reporting significantly strengthens your case, even though you technically installed the app yourself.
Use the number printed on your physical debit/credit card, passbook, or the bank’s official app — never a number found through a general web search.
Yes — include it in your cybercrime.gov.in complaint, since this helps authorities track and act against numbers being used repeatedly in this scam.
Change the passwords for every account you may have had open or visible during the screen-sharing session, not just your banking apps.
This article is for general information only and does not constitute legal or financial advice. Scam tactics and bank policies can change — verify current guidance with your bank or on rbi.org.in before relying on this for a real dispute.
