Remote Access Scams on X (Twitter)
Scammers monitor X for public complaints about technical problems, then DM the poster offering help and steering them toward installing remote-access software to resolve the issue.
Part of: Remote Access Scams
Last reviewed: 1 June 2026
X's public, searchable nature allows remote access scam operators to monitor posts in real time and target users who have publicly expressed frustration with a technical problem or account issue. By responding quickly and professionally to a genuine complaint, the scammer builds credibility before directing the victim off-platform to install remote-access software.
Because the initial contact appears to be a response to a real need, victims are less guarded than they would be with a cold unsolicited approach.
How this scam works on X (Twitter)
A user posts on X about a banking app error or a device problem. Within minutes, a reply or DM arrives from an account claiming to be from the support team of the relevant brand. The account directs the user to a support chat — often WhatsApp or Telegram — where they are walked through the installation of a remote-access app.
Some operators use impersonation accounts with usernames that append 'support' or 'help' to a brand name, and post regular support-looking replies to build the account's appearance of legitimacy before targeting victims.
Alternatively, the operator DMs the user a link directly claiming it leads to a live support chat — the link installs a script or opens a remote-session invite.
Common red flags
- Reply or DM on X from a support account shortly after you post about a tech or account problem
- Account username that includes 'help', 'support', or 'official' appended to a brand name
- Request to continue the support conversation via WhatsApp, Telegram, or a third-party chat
- Instruction to install an app or click a link to 'connect to a live agent'
- Operator who needs you to open banking or financial apps during the session
- No official brand verification badge on the support account
How to protect yourself
- Only contact tech or bank support through the official website — not through X DMs
- Verify whether a replying account is the brand's real verified support account before engaging
- Never move a support conversation from X to WhatsApp or Telegram without confirming it is official
- Report X accounts impersonating brand support using the 'Report' function
- Post a follow-up on X warning others if a scam account is replying to your complaint thread
How to report it
- Use X's 'Report' function on the account and select 'They're impersonating someone'
- Alert the genuine brand by tagging their verified account so they can warn their followers
- Report to your national cybercrime authority if remote access was granted and financial loss occurred
Frequently asked questions
How do I identify a legitimate brand support account on X?
Look for the X verification badge and confirm the username exactly matches what is listed on the brand's official website. Legitimate support accounts will never ask you to move the conversation to an external messaging app or install software via a DM link.