In mid-August 2025, the card issuer OneCard alerted its users to a rising threat known as WhatsApp Screen Mirroring Fraud. This scam involves fraudsters impersonating representatives from trusted institutions—like banks or financial companies—to manipulate victims into enabling screen-sharing via WhatsApp, often under the pretext of urgent account issues.
Advertisements
Once screen access is granted, scammers can observe everything in real time—ranging from banking app activity and One-Time Passwords (OTPs) to UPI PINs, personal messages, passwords, and even identity documents. This makes it alarmingly easy for them to initiate unauthorized transactions or take over accounts before victims realize what’s happening.
In some cases, scammers escalate the attack by guiding users to install malicious software such as keyboard loggers, which covertly capture every keystroke, including passwords and PINs. This digital infiltration enables further unauthorized access to banking and social media accounts.
Financial institutions—including OneCard and others—have issued repeated warnings about this scheme. It’s particularly effective because it exploits a user’s trust and the perceived legitimacy of WhatsApp functions.
Protection tips:
Do verify the caller’s identity via official sources before agreeing to any request.
Only share your screen when absolutely necessary and solely with trusted contacts.
Avoid using any financial or payment apps during screen-sharing sessions.
Enable two-factor authentication (2FA), keep devices and apps updated, and report suspicious calls or messages to cybercrime authorities (via 1930 or cybercrime.gov.in).
Increasing awareness and caution remain the most effective defenses against this evolving form of cyber fraud.