The call that asks you to install something on your phone

Screen sharing and remote control are genuinely useful, which is why they are the centrepiece of the most common fraud aimed at phone users. The technology is not the problem. The unexpected call is.

The rule that ends every version of it

Nobody legitimate calls you and asks you to install an app. Not your bank, not a courier, not the phone company, not a government office, not a "security department". Banks in particular will never ask you to install anything, share your screen, or read out a code — this is stated policy at essentially every bank, precisely because of this fraud.

It applies to every channel: a call, a text with a link, a WhatsApp message from a number claiming to be an institution, a pop-up with a phone number. If you did not initiate the contact, the contact is the attack.

What they are actually after

Underneath every variant, the goal is one of two permissions on your phone:

• The accessibility service, which lets their app read your screen and tap for you. This is the prize — with it they do not need to ask you for anything, because they can see the code arrive and press the buttons themselves. See why this permission is so powerful.
• Screen capture, which lets them watch. Weaker, and enough to read every one-time code your bank sends you while they talk you through "verifying" something.

The script, so you recognise it in progress

1. Urgency plus money. A suspicious transaction, a package stuck at customs, a subscription that auto-renewed, an account that will be closed today. The emotional setup is always time pressure attached to a sum.
2. A plausible verification. They tell you the last four digits of your card, or your address, or a recent order. This information is cheap and widely leaked, and it is presented as proof of identity.
3. The install. "Download this so we can guide you" — a real app from the real Play Store, which is exactly why it feels safe and why antivirus says nothing.
4. The permission. They walk you through the accessibility warning, telling you to ignore what it says. Note that they have to talk you past it, because Android is warning you correctly at that exact moment.
5. The bank app. Now they watch, or act. Transfers are made while you are on the call and looking at a screen they may be covering with an overlay.
6. Do not hang up. They will insist you stay on the line, often for an hour, because ending the call is when people check with someone else.

If you are on the call right now

1. Turn on airplane mode. Immediately, before anything else. This cuts the session and the call at once and buys you the time to think that the caller is working to deny you.
2. Do not explain, negotiate or apologise. There is nobody to be polite to.
3. Uninstall the app they had you install. All of them if there were several.
4. Turn off the accessibility service — Settings → Accessibility → Installed services. Uninstalling usually removes it, but check.
5. Call your bank on the number printed on your card, from a different phone if you can. Say the words "remote access scam"; they have a defined process and speed matters.
6. Change your banking password and email password from a different device.

Afterwards

• Check for what was left behind: new accessibility services, apps you do not recognise, and — the one people miss — forwarding rules in your email and changed phone numbers on your bank profile.
• Check your notification access list as well: an app with notification access reads one-time codes without needing anything else.
• Report it. In Türkiye, banking fraud goes to your bank first and then to the prosecutor's office; speed materially affects whether a transfer can be reversed.
• Tell someone. Embarrassment is what keeps people quiet, and quiet is what lets the same call work on the next person in the family.

Protecting someone who is a target

Older relatives are targeted disproportionately, and a lecture about technology is not the effective intervention. A pre-agreed rule is: any unexpected call about money, the bank or the phone ends with hanging up and calling you. A decision made in advance is far easier to follow than judgement while someone applies pressure.

Say explicitly that you will never be annoyed about it, and that you would rather be phoned about ten harmless calls than not phoned about the real one. Then use remote help the right way round — they call you, you help — as described in helping a relative with their phone.

More guides