A caller says they are from your bank, a telecom company or tech support, and asks you to install an app or read out a code. Here are the signs, what to do right away, where to report it in India, and how a real support session looks.
Any one of them is reason enough to hang up and check.
A call, text or pop-up says it is from your bank, a wallet or telecom company, the tax department or tech support, or it is about a parcel in your name. Real tech companies do not call or text to say your computer has a problem.
Your account or SIM card is about to be blocked, your KYC has lapsed, a parcel holds illegal goods: threats and deadlines, so you act before you check.
They ask you to download a screen sharing or remote access app that lets them see and use your computer or phone, then talk you into typing card details, a UPI PIN or an OTP while it runs. Such an app can reach the data on your device.
They ask for an OTP, your UPI PIN, card details or a password. The Reserve Bank of India tells customers to keep these from everyone, bank officials included, however genuine they sound.
They ask you to open your banking or UPI app, or to sign in to your bank, while their app is running or your screen is shared, so they see what you type.
A refund to send you, money to credit back or a KYC update to finish is the usual story. Receiving money needs no QR code scan and no PIN.
Do these in order, even if you are not sure it is a scam. If money has already left your account, call your bank and report it first.
End the call, or close the message or the pop-up. Do not call a number a pop-up shows you: real security warnings do not ask you to call anyone.
If the caller had you install an app or share your screen, stop sharing, close that app and remove it, or disconnect the computer from the internet until you can. Then update your security software, run a scan and delete whatever it flags. For the Anslation Remote agent: stop it and delete the .anslation-remote folder in your home folder.
Call the bank or company back on the number on your card, your statement or its official website. Numbers in search results, on social media or in the message itself can be fake.
Do not say, type or show an OTP, UPI PIN, card PIN, CVV or password to anyone who calls, however genuine they sound.
Once their access is cut off, or from another device: if you typed a password while a caller’s app was running or your screen was shared, or told it to them, change it, and turn on two-step verification where you can.
Call your bank on the number on your card or its official website. If money left your account, ask it to block all debits, UPI included.
In India, file a complaint on the National Cybercrime Reporting Portal at cybercrime.gov.in, or call the national helpline 1930 if money was taken.
Report it even if you only suspect a scam. If money was taken, report it quickly: the system behind 1930 links law enforcement with banks, payment companies and wallets, to try to stop the money moving on.
| Where | What it is | Use it for |
|---|---|---|
| Helpline 1930 | The national helpline for reporting financial cyber fraud, running in every state and union territory | Money taken through a card, net banking, UPI or a wallet. Call as soon as you can |
| cybercrime.gov.in | The National Cybercrime Reporting Portal, run by the Indian Cybercrime Coordination Centre (I4C) of the Ministry of Home Affairs | A complaint about any type of cybercrime, with or without money lost |
| Your bank | The number on your card, your statement or the bank’s official website | Blocking your cards, UPI and net banking, and reporting a payment you did not make |
| Local police | Your local police station or its cyber crime cell | A suspected fraud, even before any money is lost |
The signs and steps on this page, and each row above, rest on the official pages below, checked in early November 2026.
Here is a session with Anslation Remote, our own product. These are the product’s rules, not a promise about whoever is calling: anyone can claim to be your support team.
Anslation Remote, like every remote access app, cannot tell a real support team from someone pretending to be one. These habits work with any app.
Know what a real session looks like
A scam in which someone gets you to install an app that lets them see and use your computer or phone, or to share your screen, usually by pretending to be your bank, a telecom or wallet company, tech support or an official. With that access they go after your OTPs, PINs, card details and passwords.
Do not install an app or share your screen because a caller, message or pop-up asked you to. Hang up, call the company back on a number from its official website or your card, and keep your OTP, UPI PIN and passwords to yourself. In India, report fraud at cybercrime.gov.in or on 1930.
Cut off the caller’s access first: close the app and remove it, or disconnect the computer from the internet until you can, and run your security software’s scan. Call your bank at once on the number on your card or its official website and tell them what happened. Once the app is gone, or from another device, change any password you typed while it was running, or told the caller. If money was taken, ask the bank to block all debits, UPI included, and call 1930.
No. Receiving money needs no QR code scan and no PIN. A request that asks for your UPI PIN so you can receive a refund or a payment is a payment request, and the Reserve Bank of India lists it among the usual tricks of fraudsters.
File a complaint on the National Cybercrime Reporting Portal at cybercrime.gov.in, which takes every type of cybercrime. If money was taken, also call the national helpline 1930, which runs in every state and union territory, and call your bank at once.
Not on their own. A screen session starts only when you open the join page and type a one-time code yourself, and nothing is shared until you pick a screen, window or tab. A session that runs commands needs the Remote agent installed on that computer with a token from the support team’s admin. Once it is installed, that team can run terminal commands on it while you are on the join page, and with nobody at the computer if their admin turned on unattended access under an access rule, so install it only for your own organisation’s IT team. If a call you did not expect asks you to join a session, hang up and contact the company on a number from its official website.
Tell us about your team and how you help people today. We read every request and reply by email.
Office hours: Monday to Saturday, 10:00–18:00 IST+91 74158 85838
