Remote Access Scams on WhatsApp
Fraudsters use WhatsApp to impersonate tech support agents or bank fraud teams, convincing victims to install remote-access apps that give the scammer full control of the victim's device and accounts.
Part of: Remote Access Scams
Last reviewed: 1 June 2026
Remote access scams arrive on WhatsApp as urgent security notifications — a bank fraud alert, a device infection warning, or a utility account anomaly. The sender presents themselves as a specialist who can resolve the issue if the victim installs a specific app that allows the scammer to see and control the device remotely.
Once the remote-access session is established, the fraudster can navigate the victim's banking apps, change account details, authorise transactions, and harvest saved passwords — all while the victim believes they are receiving legitimate technical assistance.
How this scam works on WhatsApp
The scam begins with a WhatsApp message from an account claiming to be from a bank, internet provider, or software company. The message says the victim's device has been flagged for suspicious activity or that their account has been accessed without authorisation. To 'fix' the problem, the victim is asked to install a named app — commonly a legitimate remote-access tool repurposed for fraud.
During the remote session, the operator talks the victim through screens while silently accessing banking apps and initiating transfers, often to cryptocurrency wallets or mule accounts. The session is conducted in real time so the operator can respond to on-screen prompts such as authentication codes.
After the session, the operator instructs the victim to uninstall the remote-access app to 'remove the security risk', destroying the primary evidence of what occurred.
Common red flags
- WhatsApp message urging you to install an app to fix a device or account security issue
- Instruction to allow 'screen sharing' or remote access as part of a security resolution
- Unusual transfers or changed account details noticed after a remote-access session
- Caller who insists the app must be installed urgently or the account will be suspended
- Request for you to read out one-time authentication codes during the session
- Instruction to uninstall the remote-access app immediately after the session ends
How to protect yourself
- Never install any software at the request of an unsolicited WhatsApp message
- Understand that legitimate banks and tech support teams do not initiate remote-access requests via WhatsApp
- If you have granted remote access, immediately disconnect from the internet, then contact your bank and change all passwords
- Enable WhatsApp's privacy settings to restrict messages from unknown numbers
- Report the account to WhatsApp and to your bank's fraud team
How to report it
- Report the WhatsApp number using the in-app 'Report' function
- Contact your bank's fraud department immediately if banking apps were accessed
- File a report with your national cybercrime authority and provide details of the remote-access app used
Frequently asked questions
What should I do immediately after realising I gave a scammer remote access?
Disconnect from the internet immediately by switching off Wi-Fi and mobile data. Call your bank's fraud line from a different device. Change passwords for all important accounts from a clean device. Run a security scan on the affected device. Report the incident to your national cybercrime authority.