Remote Access Scams on Telegram
Criminals use Telegram to pose as IT support or bank security teams, sending links and instructions that lead victims to install remote-access software and surrender device control.
Part of: Remote Access Scams
Last reviewed: 1 June 2026
Telegram-based remote access scams often target users in tech communities or customer support groups where offers of assistance are expected. A scammer poses as a support volunteer or official representative and offers to fix a device or account issue — but requires the victim to install a remote-access app first.
Telegram's file-sharing features make it easy to send direct APK or app files in jurisdictions where sideloading is common, increasing the risk that victims install less-reputable remote tools with broader device permissions than legitimate app-store equivalents.
How this scam works on Telegram
A Telegram account claiming to be from a support team contacts a user who has posted a help request in a tech group, or reaches out cold claiming to have detected an anomaly. The operator sends a Telegram file or link for a remote-access tool, explaining that it is a standard diagnostic application.
Once the app is running and a session is granted, the operator accesses financial apps, export recovery phrases from cryptocurrency wallets, or enrolls the device in a fraudulent remote-management profile. The victim sees their screen being navigated but may be told it is 'just diagnostics running'.
After extracting what they need, the operator ends the session and instructs the victim to uninstall the app, deleting the principal evidence.
Common red flags
- Telegram account offering tech support and asking you to install a file or app they send
- Instructions to grant 'screen control' or 'full access' permissions to a downloaded app
- Operator who appears in a Telegram group shortly after you post a tech support question
- Request to open cryptocurrency or banking apps during the support session
- Instruction to disable antivirus or security software 'for the diagnostic to work'
- Post-session instruction to uninstall the diagnostic app
How to protect yourself
- Never install apps sent directly via Telegram file — use only official app stores
- Do not grant remote-access permissions to anyone you have only met on Telegram
- Seek technical support through verified official channels rather than Telegram community offers
- Disconnect from the internet immediately if you suspect a remote session has been misused
- Contact your bank and change all account passwords from a different, clean device
How to report it
- Report the Telegram account using the in-app 'Report' function and select 'Fraud'
- Alert the Telegram group moderator if the scammer posed as a support volunteer in a community
- File a report with your national cybercrime authority
Frequently asked questions
Is it ever safe to accept remote-access support from someone in a Telegram group?
It is very rarely safe and generally inadvisable. Legitimate tech support should be sought through official brand or service channels. If you do use a remote-access tool, only use well-known app-store versions, never grant file-system or financial app access, and terminate the session if the operator navigates to anything sensitive.