The screen-sharing trick: how fake customer care empties a UPI account

The fake customer-care trick works because it arrives exactly when you need help. A withdrawal is stuck, a deposit has not shown up, an account is locked. You search for a helpline, call the first number you find, and a polite voice says the fix is easy: install a small app or share your screen so they can "see the problem". From that moment, every OTP and UPI PIN you type is visible to them.

No genuine support desk at a bank, a payment app or a betting site needs to see your screen to solve a payment problem. That one fact is enough to stop most of these frauds.

How the trick unfolds, step by step

The pattern is remarkably consistent:

1. The number. You find it in a search result, a review reply, a map listing, a YouTube comment or a Telegram group. Fraudsters plant numbers wherever people look for help.
2. The friendly call. The person knows the brand's name, uses a few correct terms and sometimes even your registered name, which may have leaked elsewhere.
3. The tool. They ask you to install a remote-access app from the Play Store, often a real one such as AnyDesk or TeamViewer QuickSupport built for IT staff, or to start screen sharing on a WhatsApp video call.
4. The code. They ask for the access code the app shows, or ask you to tap Allow. Now they see your screen.
5. The payment. They guide you to open your UPI app "to verify" or "to receive the refund". You type your PIN. They watch.

The remote-access app is not the villain here. It is a legitimate tool; the scam is in who is on the other end.

Lines that no real support agent says

If you hear any of these, hang up. You lose nothing by calling back on a number you found yourself.

• "Please install this app so I can check your account."
• "Share your screen, I will guide you."
• "Enter your UPI PIN to receive the refund." Receiving money on UPI never asks for a PIN; only paying does.
• "I have sent a collect request, just approve it." Approving a collect request pays the other person.
• "Tell me the OTP you just got, it is for verification."
• "Pay a small fee of ₹10 to activate your withdrawal."
• "This offer closes in five minutes."

Betting users meet one extra variant: the "agent" who offers to unblock a withdrawal or sell you a "betting ID" if you transfer money to a personal UPI ID. Treat it exactly like the fake helpline. Money sent to a stranger's UPI handle has no one to answer for it.

Finding the real support channel

Real support channels live inside the product, not in search results. For a bank, that means the number printed on the back of your debit card and inside the official app. For a UPI app, the Help section of the app itself. For a betting or casino site, the chat widget and help articles on the site, opened by typing the address yourself, and any e-mail address published in its own terms.

Search results can be gamed, so treat any number you found on a search page, a map pin or social media as unverified until you see the same number inside the official app or website. Sponsored results deserve extra suspicion.

A useful habit: save the genuine support numbers of your bank and UPI app in your contacts today, while nothing is wrong. In a panic you will not want to search.

Settings that make the trick harder

A few changes on the phone take away the tools fraudsters rely on:

• Uninstall any remote-access app you do not use for work. If you need one, open it only when you started the session yourself.
• On Android, check Settings → Accessibility and switch off any service you did not turn on.
• Keep app lock or fingerprint on your UPI and bank apps, so a watcher cannot open them.
• Before entering any PIN, look at the top of the screen. A screen-sharing or casting icon means someone may be watching. Stop.
• Before you confirm, check whose name UPI shows as the receiver. If it is a person's name when you expected a company, cancel.

If it already happened: the first hour

Speed decides how much money can be stopped. Do these in order:

1. End the call and switch off mobile data and Wi-Fi so the remote session drops.
2. Uninstall the remote-access app.
3. Call your bank's official number to block UPI, net banking and cards linked to the account.
4. Dial 1930, India's cyber-fraud number, and lodge a complaint at cybercrime.gov.in. Keep the transaction IDs from your UPI history ready.
5. From a safe phone, change your UPI PIN, net-banking password and e-mail password.
6. You can also report the fraud call or message through the Chakshu facility on the government's Sanchar Saathi portal, which helps get such numbers disconnected.

Someone may ring later offering to get the money back in exchange for a fee. Refuse: it is the original fraud returning for a second bite.

Why phone users who bet are targeted

Fraudsters follow pain points, and payment trouble is the biggest one on betting sites: deposits that take time to show, withdrawals waiting on documents, accounts paused for checks. People in that state want a fast fix and may feel awkward asking family for help. That is exactly the gap a fake helpline fills.

The protection is boring and reliable: support through the site's own chat, a payee name you read before paying, a PIN that never leaves your fingers, and no strangers on your screen. Betting is for over-18s only, and the money you put in should always be money you can afford to lose.