Screen sharing app scams are a fast-growing form of banking fraud where criminals impersonate bank helpline staff and trick victims into installing remote access tools like AnyDesk or TeamViewer. Once installed, the attacker can view your screen, capture OTPs, and drain your bank account — all without needing your password.
What Is a Screen Sharing App Scam?
In this scam, a fraudster calls you claiming to be from your bank’s customer service. They tell you there is a problem with your account or that your KYC needs to be updated. To “fix” it, they ask you to download a screen-sharing or remote-access application. Once you grant them access, they can see everything on your screen — including OTPs, net banking credentials, and CVV numbers — and use this information to transfer funds from your account.
Which Apps Are Commonly Misused in Screen Sharing Scams?
- AnyDesk — Remote desktop software widely misused for banking fraud
- TeamViewer / TeamViewer QuickSupport — Remote control tools exploited by scammers posing as tech support
- AirDroid — File and remote access app misused to access Android devices
- VNC Viewer — Remote desktop application misused for unauthorised access
- Screen Share – Remote Assistant — Less-known app frequently cited in police reports
None of these apps are malicious by themselves — they are legitimate tools that criminals misuse. Your bank’s genuine customer service will never ask you to install any of them.
How Does the Screen Sharing Scam Work Step by Step?
Step 1: Caller Spoofs a Bank Number
Fraudsters manipulate caller ID apps to display their number as your bank’s official helpline. Some apps show the number as “Customer Care” because the scammer saved it that way on their own phone and synced it with a shared contacts database.
Step 2: Creating Urgency
The caller claims your account is blocked, your card has been compromised, or your KYC has expired. They create urgency to prevent you from independently verifying their identity.
Step 3: Requesting App Installation
They ask you to download AnyDesk or a similar app and share the on-screen code with them. Once connected, they can see everything you do on your device.
Step 4: Capturing Credentials and OTPs
The attacker instructs you to open your net banking app or asks you to complete a “test transaction”. They capture your login credentials, OTP, and CVV in real time and use them to authorise fraudulent transfers.
How to Prevent Screen Sharing App Scams?
- Never install an app on a caller’s request — Your bank’s customer service will never ask you to download AnyDesk, TeamViewer, or any similar app.
- Hang up on suspicious callers — If someone asks for remote access or OTPs, end the call immediately. Call your bank’s official number to verify.
- Do not share OTPs — OTPs are one-time passwords meant only for you. No bank representative will ever ask for them.
- Verify caller identity independently — Look up your bank’s number on the official website or card and call back. Never trust the number displayed by a caller ID app alone.
- Remove unfamiliar apps — Audit your phone regularly and uninstall any remote-access application you did not deliberately install. Learn more about protecting your devices from hijacking.
- Enable transaction alerts — Set up SMS and email alerts for all bank transactions so you can spot unauthorised transfers immediately.
What Should You Do If You Accidentally Gave Screen Access?
- Immediately uninstall the screen-sharing app
- Call your bank’s fraud helpline to block your account and cards
- Change your net banking password and MPIN from a different device
- File a complaint at cybercrime.gov.in with the caller’s number, transaction details, and timeline
- Call Helpline 1930 to report the fraud and initiate a transaction reversal request
How to Report Screen Sharing App Scam in India?
- Call the National Cyber Crime Helpline: 1930
- File a complaint at cybercrime.gov.in
- Lodge an FIR at your nearest cyber crime police station
If you have lost money in a screen sharing app scam, contact cyber expert Anuraag Singh immediately for incident response and to initiate a recovery process.
