Remote access scams: when an impostor is controlling the cardholder's phone
Remote access scams trick cardholders into installing screen-sharing apps, then use their own phone to pay. How the scam works and how issuers can respond.
Most fraud controls ask whether the right person is holding the right device. Remote access scams defeat that question by design: the device is the cardholder's, and the cardholder is holding it. Someone else is just steering.
How the scam usually runs
- A call, text or pop-up claims there is a problem: a hacked account, a refund due, a virus.
- The caller, posing as the bank, a retailer or tech support, asks the victim to install a screen-sharing or remote-control app to help.
- With the screen visible, the scammer watches the victim log in, sees one-time passcodes arrive and talks them through payments, or takes control directly.
- Payments go through the cardholder's own device, often passing every authentication check.
Why it matters now
Impersonation is one of the costliest scam types. The US Federal Trade Commission reported that people lost $3.5 billion to imposter scams in 2025, with bank impersonators reporting the highest losses among business impersonation. Remote access is a common tool in those scams because it turns the victim's own trusted device into the attacker's.
What issuers can do
- Use context from the issuer's own app at the moment of payment, not only identity checks before it.
- When the context looks wrong, warn the cardholder on their phone in plain language, at the moment it matters, before money moves.
- Give the cardholder a clear way out: cancel, hang up, call the number on the back of the card.
- Keep the warning calm. Fear is the scammer's tool. Clarity is the bank's.
0Fraud's scam check runs on every payment and uses context the issuer's app can see. We don't publish the signals or how they are weighed, because the people we are stopping read websites too.