8. Tech Support & Remote Access Scams
● The Real Scenario: A computer user gets a sudden, loud pop-up alert on their desktop screen claiming that their computer is heavily infected with malware and their banking data is compromised.
● How It Works: The pop-up provides a toll-free number for "Microsoft Support." The technician on the line convinces the victim to download a remote desktop app like AnyDesk or TeamViewer. Once inside, the scammer blackouts the screen and silently transfers funds using the victim's open net-banking tabs.
● How to Avoid: Never download remote access software based on an unprompted pop-up or phone call. Official tech companies never put phone numbers in error pop-ups to demand immediate contact.
What Financial Industry Experts Recommend
Paytm specifically warns about fake customer-care and screen-sharing scams. Fraudsters may claim to help with a failed transaction, KYC update or refund and then convince victims to install screen-sharing software.
“No legitimate bank or payment app will ever ask you to install remote-access software.” - Paytm.
The Scale of Tech Support & Remote Access Scams (2026 Data)
● The Rising Domestic Curve: Remote access scams now account for roughly 18% of all digital banking frauds reported by urban professionals and senior citizens in India.
● High Transaction Values: Because the scammer gains full control of the victim's physical device, they can bypass standard anti-fraud behavior checks. The average financial loss per incident sits at Rs 1.5 Lakhs to Rs 6 Lakhs, often involving the liquidation of fixed deposits (FDs) during the session.
● Browser Hijacking Epidemic: Over 85% of these incidents begin via malicious adware networks embedded in movie streaming, torrent, or pirated content sites. These networks trigger persistent JavaScript loops that lock the user's browser, make the screen go full-screen, and play an alarm sound to simulate a total system crash.
● The Exploitation of Legal Utilities: Scammers rely entirely on legitimate, commercially available remote desktop protocol (RDP) tools like AnyDesk, TeamViewer, RustDesk, or UltraViewer, meaning standard antivirus software often fails to block the initial intrusion.
Tech-support and remote-access scams increasingly overlap with malicious-app and impersonation fraud. In August 2026, India's cybercrime authorities identified at least 57 Firebase-hosted websites and databases being used to distribute malware or collect sensitive financial information; seven of the identified sites were phishing pages impersonating major Indian banks.
