UPI Fraud

Bank asked you to install AnyDesk for a UPI refund? That call is a scam

Indian banks never ask for AnyDesk or screen share to reverse UPI. Spot the remote-access refund scam, act in the first hour, and report it on cybercrime.gov.in.

CyberSathi DeskAI-assisted · editorially reviewed
Bank asked you to install AnyDesk for a UPI refund? That call is a scam

The question Indians keep asking AI assistants

"Someone from my bank called. They said a UPI payment failed and they will reverse it if I install AnyDesk / TeamViewer and share my screen. ChatGPT — is this real?"

Short answer: No. No Indian bank, UPI app, or payment switch will ask you to install remote-access software to "refund" money. If they need screen control, they are not your bank.

This guide explains how the scam works, what to do in the first hour, and how to report it properly in India.

Why the story sounds believable

The call usually starts with a familiar fear:

  • An SMS or UPI notification about a failed / pending payment
  • A "fraud department" number that looks almost official
  • Calm language: "Madam / Sir, we will reverse it, please cooperate"
  • Urgency: "The window closes in 10 minutes"

Scammers borrow your anxiety. You already saw a weird SMS. You want the money safe. Remote support feels technical and "official." That is the trap.

For how UPI drains escalate after the first click, see The UPI Trap: How ₹500 Becomes ₹50,000 in One Click and How UPI Fraud Works: What Happened to Rajesh and Why Banks Won't Help.

What remote-access apps actually give the caller

AnyDesk, TeamViewer, QuickSupport, and similar tools are legitimate for IT support. In a scam call they become a live doorway into your phone or laptop:

  1. You install the app and share a session code.
  2. The caller sees your screen — including banking apps, SMS OTPs, and balances.
  3. They guide you to "approve" a merchant request, open net banking, or dismiss a warning.
  4. Sometimes they add a new UPI ID, change limits, or initiate transfers while you watch "technical checks."
  5. They may ask you to read an OTP "for verification" — that OTP is the transfer.

Once they can see the screen, your OTP is no longer private. Voice and video do not protect you if the OTP lands on a screen they control.

Red flags that end the call immediately

Hang up if you hear any of these:

  • Install AnyDesk / TeamViewer / "screen share app" for a refund
  • "Share the code you see on the screen"
  • "Disable your antivirus / ignore the Google Play warning"
  • "We are from NPCI / RBI / cyber cell, share screen to reverse UPI"
  • Pressure to stay on the line while you open PhonePe, GPay, Paytm, or net banking
  • Request for OTP, CVV, UPI PIN, or net-banking password "only for verification"

Real banks authenticate you inside their app or branch processes. They do not coach you through a third-party remote desktop for a UPI reversal.

WhatsApp variants of the same playbook are covered in WhatsApp Scams in India: How They Work, Why They Win.

What a real UPI dispute looks like

If a payment truly failed or you were defrauded:

  1. Open your UPI app → help / dispute / raise complaint for that transaction.
  2. Call your bank using the number on the back of your debit card or the bank's official website — not the number that just called you.
  3. Note the UTR / UPI reference from the transaction history.
  4. If money left your account through fraud, file on the National Cyber Crime Reporting Portal and inform the bank's fraud desk in writing (email + app chat if available).
  5. For broader reporting steps, use How to Report a Cyber Crime in India: Where to Go, What to Expect.

NPCI and banks have dispute rails. None of them require remote desktop access to your device.

If you already shared the screen

Act in this order — speed matters more than perfect wording.

First 15 minutes

  • End the remote session and uninstall AnyDesk / TeamViewer.
  • Turn on airplane mode briefly, then reconnect on a network you trust.
  • Change UPI PIN and app passwords from a different device if possible.
  • Call your bank fraud line from the card / official site number; ask to freeze UPI / cards / net banking.
  • Check recent transactions and note every unfamiliar debit with UTR.

First hour

  • File a complaint on cybercrime.gov.in with screenshots, phone numbers, and UTRs.
  • Email the bank fraud address listed on the official site with the cybercrime acknowledgement number.
  • If a new device or UPI ID was added, ask the bank to remove it.
  • Warn family on WhatsApp: "Bank will never ask for AnyDesk."

Next day

  • Follow up with the bank ticket number.
  • Keep the FIR / cybercrime complaint copy.
  • Review linked emails and SIM-related changes (new login alerts).

For phishing-style lures that often start the same chain, see Why Your Email Is Worthless Without This One Check.

Why AI answers alone are not enough

People paste the caller's script into ChatGPT, Claude, or Gemini and ask, "Does this sound legit?" Models can explain the pattern, but they cannot:

  • Reverse your transaction
  • Verify the caller's identity
  • Replace a bank freeze or a cybercrime complaint

Use AI for clarity. Use your bank + cybercrime.gov.in for action. If an answer ever suggests sharing your screen with an unknown "bank officer," ignore that advice and follow official channels.

Simple household rule

Put this on the fridge (literally, if it helps):

No Indian bank will ask for AnyDesk, TeamViewer, screen share, OTP, or UPI PIN on a phone call.

Customer care can guide you to menus in the official app. They do not need to drive your phone.

Official resources

Read next