What is ‘WhatsApp Screen Mirroring Fraud' that can drain your bank account and lead to identity theft? Learn how you can avoid it
OneCard in its advisory said: 'In this type of scam, fraudsters trick a person into enabling screen-sharing via WhatsApp. This way, the fraudsters gain access to the person's sensitive information such as OTPs, bank details, passwords, personal messages, etc. As a result, the person can fall prey to financial losses, account takeovers and even identify theft.' How does the WhatsApp Screen Mirroring Fraud work? According to the advisory, here's how this fraud works: 1: Trust The fraudster poses as an employee of a trusted organisation like a bank or financial company. They falsely claim that there's an issue with your account and convince you to share your screen with them. This is how the fraud starts. 2: The initiation The fraudster walks you through a tutorial on enabling screen-sharing on your device and then cleverly claims they can't see your screen properly and now need you to start a WhatsApp video call with them. 3: The Theft The fraudsters can see your screen live while you're using a screen-sharing app. They start any banking transaction by claiming it's for verification. The moment you receive the OTP or enter your PIN/Password to approve the transaction, the fraudster is aware of it. 4. Alternative way: Keyboard logger The fraudster could use this alternative methd of installing a keylogger or keyboard logger into your mobile device. A keyboard logger is a type of software that monitors what you type on the virtual keyboard. This is also the reason why many banking websites provide an on-screen keyboard for you, since the keylogger can't capture what you enter using that on-screen keyboard.After the fraudster instals the malicious app or keyboard logger on your mobile device, they can steal your banking passwords, social media passwords, and more.
5. Using the stolen information The fraudster can use the information collected from your mobile device to make unauthorised transactions, mess with your banking accounts and even commit identity fraud.
Cyber crime Sheetal R Bhardwaj, executive member of Association of Certified Financial Crime Specialists (ACFCS), explains: A new wave of digital fraud is sweeping across India, targeting unsuspecting users through a sophisticated scam known as WhatsApp Screen Mirroring Fraud. This alarming trend exploits trust, technology, and urgency—leaving victims vulnerable to financial and identity theft.
Fraudsters typically pose as representatives from trusted institutions such as banks or financial service providers. Under the guise of offering assistance, they convince victims to install remote access or screen mirroring apps.
Once active, these apps allow scammers to view everything on the victim's screen in real time, including: One-Time Passwords (OTPs) Banking app activity UPI PINs Personal messages Identity documents "With this access, scammers can instantly steal funds, hijack accounts, and impersonate victims—often before the individual realizes what's happening." Most banking apps in India have adequate protection from these type of frauds Tarun Wig, Co-Founder and CEO, Innefu Labs, explains: "Most of the top banking apps in India do have security features like secure screen overlays, screen capture lockdown and session timeout capabilities. But the efficacy of these protection measures can differ considerably between platforms."
"While certain apps prevent screen sharing or screen recording directly, others might lack strong controls especially on rooted or compromised devices. Additionally, if customers inadvertently provide screen-sharing permissions, some third-party applications can bypass such security measures. It's an area where ongoing innovation and stronger app-level controls are necessary in order to remain ahead of changing fraud schemes." How to protect yourself from WhatsApp screen sharing fraud? According to the advisory, here are some dos and don'ts that, if you follow them properly, can help you avoid falling victim to the WhatsApp screen sharing fraud: Dos Verify the authenticity of callers claiming to be from banks or finance companies.
Enable screen-sharing only when absolutely necessary and do it only with trusted contacts.
If you use an Android phone, disable the 'App installations from unknown sources' setting.
Block suspicious numbers immediately and report them to cybercrime.gov.in or call 1930. Don'ts: Avoid answering calls from unknown or suspicious numbers.
Never use financial apps (e.g. mobile banking, UPI apps, e-wallets) during screen-sharing. You can also call the cyber crime helpline at 1930 or go to https://cybercrime.gov.in/Bhardwaj explains what you can do to stay safe: Verify the caller's identity through official channels before engaging.
Avoid screen-sharing unless absolutely necessary and only with trusted contacts.
Enable two-factor authentication on all financial and messaging apps.
Keep your phone's operating system and apps updated to close security gaps.
Educate family members, especially elders, who are often targeted by such scams.
Notify your bank to freeze or secure your accounts. DON'T: Never answer calls from unknown numbers that pressure you to act quickly.
Avoid using financial apps during any screen-sharing session—even with trusted individuals.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
India Today
28 minutes ago
- India Today
Received a fake income tax call? Key warning signs and tips to protect yourself
As the tax filing season picks up, scammers are getting more active and creative. Across the country, several taxpayers have reported receiving fake calls and emails from individuals pretending to be officers from the Income Tax Department or the Reserve Bank of fraudsters often use threats of legal action or urgent warnings to trick individuals into sharing sensitive personal and financial information. Experts warn that falling for such scams could lead to serious financial loss and misuse of personal SCAMSTERS OPERATEFraudsters usually reach out through emails, phone calls, text messages and even WhatsApp video calls. They often introduce themselves as tax officials and claim that the taxpayer is facing a serious tax violation. To make the threat appear genuine, they use fake ID cards and fabricated case many cases, they pressure the victim to share bank account numbers, OTPs or credit card details with the excuse of 'verification'.KEY RED FLAGS TO WATCH OUT FOROfficial communication from the Income Tax Department always includes a Document Identification Number (DIN). Any message, email or call that does not contain a DIN should be treated with suspicion. These fraudulent messages are designed to create panic and force people into making hasty legitimate tax notices are uploaded to the official e-filing portal, and taxpayers can view those by logging into their account. If a message or caller demands urgent action, but there is no official record on the portal, it is very likely a common trick is using email addresses that look similar to government domains. Genuine emails from the tax department will only come from addresses ending in @ The department never asks for personal details such as bank passwords, debit or credit card PINs, or OTPs through email or telephone. Any request for such information should be considered a strong warning TAXPAYERS SHOULD DOOfficials advise taxpayers to stay calm, even if a caller sounds official or threatening. Always verify any tax-related message or email by logging into the official income tax portal. Never share personal financial details or respond to unverified also recommend spreading awareness among family and friends, especially those who may be less familiar with online tax procedures. Staying informed about the tactics used by scammers can go a long way in preventing tax filings are an annual activity, but new types of scams appear every year. Remaining alert and cautious is the best way to stay safe.- Ends
India Today
3 hours ago
- India Today
WhatsApp borrows a page from Google Meet and Microsoft Teams with new call scheduling feature
WhatsApp is taking a fresh swing at Google Meet and Microsoft Teams with the launch of a new call scheduling feature and other capabilities designed to make group and personal video calls more seamless and efficient. The 'Schedule Call' feature will allow a user to plan a call, in person who has been invited for the call will receive a notification before it is supposed to kick off. This is similar to pre-scheduled meetings on other platforms. This will allow users to set-up meetings and not have the risk of forgetting any important will be able to view their upcoming calls and the list of attendees via the Calls tab. WhatsApp has also added a feature to react or raise hand during the calls. This is a global WhatsApp update meaning that it will be rolled out globally for all users. The features show that the platform is trying to directly pitch itself as a professional meeting a press note, the company said, 'We're launching these updates to give users new ways to connect, whether for family catch-ups or professional meetings.' WhatsApp affirmed that all calls will remain end-to-end attendees will be able to invite others to a call via a sharing link. When someone uses the shared link, the one who scheduled the call will receive a notification. WhatsApp's latest beta helps you write messagesThe Meta-owned platform has a lot in the pipeline. Last week, the app unveiled Writing Help, an AI-powered feature, that helps users write messages. Not only will it fix grammar mistakes but even change the tone of a text before sending it to someone. This feature uses Meta's Private Processing technology. Users will need to click on a pen icon on the keyboard which would fetch them suggestions to enhance the message. Once selected, the updated text can be sent. However, the receiver will not be notified that the message had been modified by the AI tool. This can help users who want to make their messages seem more professional or check the grammar of any text without having to fiddle with external apps or Writing Help tool is currently only available for Beta testers. WhatsApp claims that this feature would be entirely optional. - Ends
Mint
4 hours ago
- Mint
Income tax scam calls: How to detect and report in FY 2024-25
As the tax season for FY 2024-25 continues to gain momentum, taxpayers are getting increasingly targeted by scamsters impersonating income tax and RBI officers. This is done through emails, calls, text messages, and even WhatsApp video calls. Falling prey to such scams can result in serious financial reverses and compromised data. These risks make vigilance vital for all taxpayers. Scamsters use threats of legal action, intimidating messages, and fabricated credentials to exploit innocent taxpayers to extract sensitive information, while they go ahead with filing taxes for FY 2024-25. Hence, all taxpayers should keep these points in mind while going ahead with their income tax submissions: Official communication from the income tax department always carries a unique DIN, i.e., Document Identification Number. Any text message, notice, or email without a DIN is a clear warning sign and can likely be fake. That is why you should always go through the origin of such messages carefully and never entertain them. Proper income tax notices and communications are uploaded to your official e-filing portal. You can obtain complete details on the same by logging into your income tax account through the official website. If a text message, email, or call urges immediate action without any official record, you should treat it with caution. Never panic in such situations and verify it before proceeding with the official channels of communication. Legitimate emails only originate from '@ Do keep in mind, scammers and fraudsters often mimic and copy these domains. That is why always verify every sender's address, name, and objective behind the email before replying. Income notices generally never cause panic. They give responders time to respond. The income tax department never requests taxpayers for personal or confidential details such as credit card PINs, passwords, OTPs, or bank information through calls or emails. If you are faced with any pressure tactic to extract such information, it is a scam. If you ever feel that the call or message received by you is fraudulent, then you should take immediate action to protect yourself from financial reverses and report the scam properly. You should also ensure that you report such events so that the rights of other taxpayers can also be defended. You can reach out to the national cybercrime reporting portal at or dial the helpline 1930 to report any cybercrime. You can also file a complaint at your local police station, providing call details and any evidence. To report fraudulent refund emails, calls, or messages, you can send an email to webmanager@ attaching relevant communication and FIR copy if possible. Reach out to your bank if financial information has been shared, and monitor transactions closely. Inform your telecom provider to assist in blocking or tracking scam numbers. To stay alert and safe while dealing with such scams, you should: Never lose your composure and calmness. Never respond to unverified calls seeking personal or financial details. Verify tax messages by logging into the official income tax portal. Share awareness with your friends and family to curb such scams. Continue to build knowledge of new ways through which such crimes are planned. For all personal finance updates, visit here. Disclaimer: Mint has a tie-up with fintechs for providing credit; you will need to share your information if you apply. These tie-ups do not influence our editorial content. This article only intends to educate and spread awareness about credit needs like loans, credit cards, and credit scores. Mint does not promote or encourage taking credit, as it comes with a set of risks, such as high interest rates, hidden charges, etc. We advise investors to discuss with certified experts before taking any credit.
