Mobile devices have become increasingly important in the average user’s life. These days, there’s an app for everything, from banking to other day-to-day activities. So, it should come as no surprise that scammers are developing techniques to gain access to their victims’ smartphones.
An increasingly prevalent tactic is the remote access scam. As the name suggests, it entails tricking unsuspecting users into installing software that gives malicious actors remote access to the devices. From there, the scammer can take control of the phone and steal confidential information, personal data, and even complete financial transactions.
The Playbook
These scams typically involve the scammer posing as “helpful” figures. The victim may receive an unsolicited call from a “bank officer” informing them of suspicious transactions, for instance. In this situation, the victim can be persuaded to download apps under the pretense of verifying their identity and securing their account. The app in question may be software like TeamViewer, or malware masquerading as a legitimate service.
Regardless, after being convinced to install the remote-access tool and grant the necessary permissions, the victim will lose control of their device. Meanwhile, the scammer has free rein to do as they wish, including operating banking apps and transferring the user’s funds. In many cases, victims can suffer heavy losses before regaining control.
Manipulation Is The Game
Underneath all the advanced tools, the heart of every scam remains social engineering. Rather than trying to defeat technical security measures, scammers manipulate victims into handing control, completely bypassing conventional safeguards.
According to Universiti Sains Malaysia Cybersecurity Research Centre director Prof Dr Selvakumar Manickam, scammers may create a sense of urgency in the target by claiming that their bank account has been frozen, a police matter needs to be resolved, or that an unpaid bill requires immediate action.
Generative AI has also made it easier for fraudsters to trick their victims. AI voice cloning and deepfake videos can help scammers pose as family members or authority figures even more convincingly. Those who aren’t particularly tech savvy, such as older users, may be more vulnerable to these tactics.
Of course, awareness may not necessarily be enough to prevent these scams. Earlier this year, a survey revealed that Malaysians still fall victim to scams despite being alert to them. Moreover, the country recorded over 66,000 online scam cases last year, marking an 87% increase compared to 2024.
Taking Action
Those falling victim to such scams must act quickly to mitigate the damage. If the scammer is actively accessing the device, the user must disconnect it from the Internet. Naturally, the user must contact their bank and the authorities to report the incident.
As for the affected smartphone, Selvakumar recommends resetting it. This should be done after important data has been backed up or checked by a trusted technician. A factory reset should ensure there is no lingering malware even after the offending app has been removed. As always, though, prevention is better than cure. Users are advised to avoid downloading unknown or suspicious software. Other than that, they should refrain from clicking on links from strangers.
(Source: The Star [1], [2])
