Remote Access App Bank Refund Trick
A caller offers a refund and asks you to install a remote-access app. Once he sees your screen, he moves money out of your bank app.
A caller says he is from your bank or a shopping site and that an excess charge of Rs 1,500 must be refunded to you. To do it, he says, he must 'guide' you in the app. He asks you to install a screen-sharing tool and read out the code it shows. A minute later your phone is under his control, and he can see everything you type, including your PIN.
How the scam works
The set-up is a believable problem: a double charge, a failed refund, or a wrong deduction. The caller has your name and sometimes a recent transaction, which he finds from leaks or by guessing. He speaks calmly and sounds patient. He asks you to open the app store and install a free 'support' or 'quick help' tool, saying it lets him fix the issue without you doing anything.
The pressure comes from procedure. He tells you to open the tool, read out the nine-digit code or approve the connection, and then to keep the phone unlocked. He says not to touch the screen while he works. Soon he asks you to open your bank or UPI app so that he can 'see the refund page', and asks you to turn your head away or put the phone down while he completes it.
The payoff is full access. He can watch you type your PIN, read incoming OTPs and approve payments from the screen. Some callers send a small amount to your account and then show you an edited screen saying that they sent too much, asking you to 'return' the extra by UPI. Other times they transfer money out while you wait. The call ends only when the account is nearly empty.
An example of what you may see
Example call (invented): 'Sir, this is regarding your refund of Rs 1,500. For security I cannot send it directly. Please install the support tool from the store and tell me the nine-digit code on the screen. Now open your bank app so I can check the page. Do not press anything, I will do it for you. Please do not hang up or the refund will be cancelled.' You then see a prompt asking you to allow screen recording.
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- A caller asks you to install a screen-sharing or remote-control app.
- You are asked to read out a connection code shown on your phone.
- You must open your bank or UPI app while the connection is active.
- The caller says not to touch the phone or to end the call.
- A refund is offered, but you must act or approve something first.
- The 'bank' agent calls from a normal mobile number and not an official channel.
What to do right now
- End the call and close any remote-access app at once, then switch on airplane mode.
- Uninstall the tool and check the phone for other apps you did not install.
- Call your bank on the number printed on your card and ask for a check on recent transactions.
- Change the bank, UPI and email passwords from a different, safe device.
- Never read out a connection code or let someone control your phone.
If you already paid or shared a code
- Call 1930 right now and report at cybercrime.gov.in.
- Call your bank using the number on your card and ask them to freeze the account or card.
- Change your UPI PIN, net-banking password and email password after removing the app.
- Keep screenshots of the call log, the app and the transactions.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
Phone scan in Safeavio Sentinel reviews installed apps and their permissions, and can point out apps that look unfamiliar or risky so you can remove them. Scam check can read a message or script you paste and flag pressure and fake authority. The Remote help feature in Safeavio works only when you approve it on your own phone, and is meant for people you trust. Safeavio cannot stop a call or reverse a transfer.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
Why would a bank agent ask me to install an app?
A genuine bank never needs control of your phone to fix a refund. Refunds go back to the original payment method without your help. A request to install a remote tool is a strong warning sign.
Is the remote-access app itself illegal or a virus?
Many such tools are legitimate for IT support. The danger is who you let connect. If a stranger asks you to install one and read out the code, he gets the same power as holding your phone.
What should I do right after ending the session?
Disconnect from the internet, uninstall the app, call your bank from the number on your card, and change your passwords from a different safe device. Then report to 1930 if any money moved. Report quickly, because speed matters.