UPI Screen-Sharing Scams — How AnyDesk Fraud Works
This is the scam behind most large UPI losses — not a hacked system, but someone willingly handing over remote control of their own phone.
What this scam looks like
You get a call — often about a problem with your bank account, a "wrong" refund you supposedly received, or an issue with a recent order. The caller sounds calm and professional. To "fix the issue," they ask you to install a screen-sharing app like AnyDesk, TeamViewer, or QuickSupport, and read out a code shown on your screen.
The moment you share that code, the caller can see and control your phone exactly as if they were holding it. They open your UPI app, watch you enter your PIN, or guide you through a "test transaction" that is actually a real transfer of your money.
Why it works
The scam doesn't break UPI's security — it bypasses you. Banks and UPI apps are built to require your explicit PIN entry for every payment, so fraudsters need you to do that step yourself, believing you're fixing a problem rather than authorising a transfer. A calm, official-sounding voice and a plausible reason (a refund, a KYC update, a "wrong" credit) is usually enough.
Red flags to watch for
- Anyone asking you to install a remote-access app to "help" with a bank or UPI issue
- Being asked to read out a code shown on your screen to a caller
- Being told to open your UPI app "just to check" something during the call
- Pressure to act immediately, or claims that delay will cause you to lose money
How to protect yourself
No legitimate bank, UPI app, or customer support team will ever ask you to install a screen-sharing app. If a call asks for this, hang up — even if the number looked official, even if they already knew your name or partial account details. Call your bank back directly using the number printed on your card or their official website, never a number given to you during the call.
If this has already happened to you
Uninstall the screen-sharing app only after you've screenshotted it for evidence, then follow the steps on our "I've Been Scammed" page immediately — speed matters most in the first 30 minutes.
This article is general awareness information, not legal advice. See our disclaimer for details.