Screen sharing fraud is a common cyber crime targeting banking customers. Here is the complete guide:
Step 1: How the fraud works. (a) the scammer calls you (posing as a bank representative, RBI official, or customer support — claiming there is a problem with your account), (b) the scammer asks you to install a screen sharing app (e.g., AnyDesk, TeamViewer, RustDesk, or a malicious app from a link — under the pretext of “verifying your account” or “updating KYC”), © the scammer sees your screen (when you open the banking app — the scammer can see your login credentials, OTP, and transaction details), (d) the scammer initiates transactions (while you are on the call — the scammer sees the OTP on your screen and completes the transfer before you realize).
Step 2: Common pretexts. (a) “Your account will be blocked” (the scammer claims the account will be blocked due to KYC non-compliance — and asks you to verify via screen sharing), (b) “Your card has been used for fraud” (the scammer claims your card was used for a fraudulent transaction — and asks you to verify via screen sharing), © “RBI is updating your account” (the scammer poses as an RBI official — RBI never calls customers directly for account updates), (d) “Your loan is approved” (the scammer claims your loan is approved — and asks you to share the screen for verification), (e) “You have received a refund” (the scammer claims a refund is pending — and asks you to share the screen to process it).
Step 3: Immediate action. (a) if you are still on the call: hang up immediately (do not follow any further instructions), (b) uninstall the screen sharing app (go to Settings → Apps → [app name] → Uninstall), © call your bank's customer care (request them to block your account and all cards — mention “screen sharing fraud”), (d) change your banking passwords (net banking, mobile banking, UPI PIN — from a different device if possible), (e) deactivate all beneficiaries (so the scammer cannot transfer money even if they have access).
Step 4: File a complaint. (a) file a complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in → “Report Cyber Crime” → select “Financial Fraud”), (b) the complaint should include: (i) the phone number from which the scammer called, (ii) the app that was installed (name and download source), (iii) the transaction details (date, amount, beneficiary account — if money was transferred), (iv) any screenshots or call recordings (if available), © call the cyber crime helpline 1930 (within the golden hour — the first 1-2 hours — the police can freeze the beneficiary's account before the money is withdrawn).
Step 5: File RTI. File RTI with the cyber crime cell / state police asking for: (a) the status of cyber crime complaint number [number] filed on [date] (amount: Rs [amount]), (b) whether the beneficiary's account has been frozen (if yes: provide the freeze order details), © whether the money has been recovered (if yes: provide the recovery details — amount and date), (d) the number of screen sharing fraud complaints received in [year] (to understand the scale of the problem), (e) the action taken on those complaints (including chargesheets filed and convictions).
Step 6: Bank's liability. (a) the bank may argue that you authorized the transactions (you entered the OTP — even though the scammer saw it via screen sharing), (b) however: the RBI has held that the bank must ensure reasonable security (if the bank's app allows screen sharing to capture OTP — the bank's security is inadequate), © the Banking Ombudsman can examine whether the bank took adequate security measures (and order compensation if the bank's security was inadequate), (d) file a complaint with the Banking Ombudsman (arguing that the bank's security measures were inadequate — and the bank should compensate for the loss).
Step 7: Preventive measures. (a) never install screen sharing apps at the request of a caller (no bank or RBI official will ask you to install a screen sharing app), (b) never share OTP, PIN, or password with anyone (even if the caller claims to be from the bank — the bank never asks for these), © disable screen capture in your banking app (some banking apps have this setting — check and enable it), (d) use app lock (lock your banking apps with a separate PIN or biometric — so even if someone has access to your phone, they cannot open the banking app), (e) report suspicious calls (to the bank and the cyber crime helpline 1930 — even if you did not lose money).