When a Helper Takes the Wheel: How Screen Sharing Apps Are Used to Empty Bank Accounts

Imagine you have ordered something online and it has not arrived. You search for the company's customer care number, call it, and a patient voice says: "I can fix this right now. Just install a small app so I can see your screen." It sounds like modern, efficient support. But if that app gives a stranger control of your phone, the call is no longer about your order. It is about your bank account.

This offence is a textbook case of social engineering fraud. The criminal does not need to break any security system. He convinces you to open the door and then sits down inside your phone.

How the fraud works

It usually begins with a search. A person has a problem with a bank, a delivery or a refund, and looks up a customer care number on a search engine. What the search shows can be a number planted by fraudsters, who list fake contact details that look genuine.

When the victim calls, the fraudster plays the customer care executive. He says he will help, or that company policy requires a verification step, and asks the victim to install a screen sharing or remote access app. Common ones named in the awareness material are Quick Support, TeamViewer and AnyDesk. These are legitimate tools used by IT teams everywhere, which is part of why the request does not seem odd.

After installation, the app produces a code. The victim is told to read it out so that the "support agent" can connect. Once the code is shared, the fraudster can see everything on the victim's screen, and in some setups, can operate the device as well.

From there, things move fast. Banking apps, passwords and OTP messages appear on the screen the fraudster is watching. He can log in, approve transactions and move money to his own account. Notably, he does not even need the victim to read out an OTP, because he can see it arrive. By the time the victim realises what has happened, a large amount has often gone.

Why the usual protections do not help

OTPs, MPINs and passwords exist to stop strangers from using your account. But all of them are displayed on your own phone, and a screen sharing session shows that phone to someone else. The security is intact, but the person watching is not supposed to be there.

That is why this fraud is so damaging. In many scams the victim is tricked into reading out a secret. Here the fraudster simply watches the secrets appear.

Why people agree to it

• Real need. The victim is the one who called, with a genuine problem, so there is no reason to suspect the person who answers.

• Trusted look. Search results seem authoritative, and a number near the top feels official.

• Technical comfort. Remote support is how many legitimate companies resolve issues, so the request sounds routine.

• Step-by-step guidance. The caller walks the victim through each tap, which reduces the chance to stop and think.

• Politeness. It feels rude to refuse someone who is trying to help.

The rules that keep you safe

1. Never install a screen sharing app because someone on a phone call asked you to. This applies to customer care and help desk staff of any company.

2. Banks and e-commerce companies do not ask customers to install third party applications for screen sharing. If someone says they do, the call is not genuine.

3. Do not read out the connection code an app shows you.

4. Do not trust a number found through a search engine. Get contact details from the official app, the official website, the card in your wallet or a receipt.

5. If you are unsure, end the call. Contact the company again through a number you have verified yourself.

6. Watch your own phone. If you are told to open banking apps while a stranger is connected, disconnect immediately.

A useful habit is to talk to elderly relatives and others who are less comfortable with technology about this scam. It is the type of call where a short warning can save someone's savings.

The legal angle

This kind of fraud is generally dealt with under the Information Technology Act, 2000, which includes Section 43 and Section 66 (unauthorised access to a computer resource or device and related offences), Section 66C (dishonest use of identifying information) and Section 66D (cheating by personation using a computer resource), along with the cheating provisions of the Bharatiya Nyaya Sanhita. The exact sections depend on the facts of each case and the view of the investigating agency.

If you have already shared the code

1. Disconnect at once. Uninstall the app, or switch off the internet connection on the phone.

2. Call your bank immediately and ask them to block your accounts, cards and UPI.

3. Call the National Cyber Crime Helpline, 1930, without delay.

4. File a complaint at cybercrime.gov.in.

5. Change your banking passwords and PINs from a safe, different device, since the old phone may be compromised. Consider a reset of the phone itself.

6. Keep the call details, the fake number, screenshots and transaction IDs.

7. Report quickly. Under RBI's framework for unauthorised electronic transactions, reporting within three working days generally strengthens the customer's position where the fault does not lie with them. In this fraud the victim has allowed access, so banks may question the position, which makes records all the more valuable.

A closing thought

A genuine helper never needs to see inside your phone to solve a problem with your money. Every legitimate company has other ways to help, such as dashboards, official apps, written instructions and refund processes. If a caller says the only way is to hand over your screen, the right answer is simple: no, thank you, and hang up.