Ghost-hand remote-access scam : fonctionnement, signaux et que faire

Banking fraud · alto

A fake bank agent or tech-support person convinces the victim to install a remote-access app or a "security app" (actually malware), or to enable accessibility permissions.

From then on the scammer sees and controls the screen. They often ask the victim to open their banking app "to check" and capture the password; the screen may then go black or show an "update" message while they make transfers and take out loans.

The victim sees the screen "moving by itself" — hence the name ghost hand. In the US, tech-support scams follow a similar pattern, starting with a "virus detected" pop-up and a number to call.

Sinais / Signs

Request to install an app suggested by the caller.
Request to enable accessibility permissions or screen sharing.
"Virus" pop-up with a support phone number.
Screen goes dark, freezes or moves by itself.
They ask you to open your banking app while on the line.

Prevenção / Prevention

Never install apps at the request of someone who contacted you.
Download apps only from official stores and review accessibility permissions.
Banks don't provide support by remotely accessing your phone.
Keep your system updated and enable the app store's built-in protection.
Set low transfer limits and require biometrics for large amounts.

O que fazer / What to do

Cut the device's internet (airplane mode) and uninstall the remote-access app.
Call your bank right away using the official number (back of the card or in the app) and ask to block cards, accounts and access.
If you paid via Pix, ask your bank to open a MED (Special Return Mechanism) claim as soon as possible — time matters because funds move fast.
Change passwords for email, banking and social media, turn on two-step verification and sign out of other devices.
Factory-reset the device or take it to a trusted technician if you suspect malware.
File a police report (many Brazilian states accept online reports) and keep screenshots, receipts, numbers and links.

FAQ

What is the ghost-hand scam?

It's when a scammer remotely controls your phone after convincing you to install an app or grant permissions, then makes transactions without you touching the screen.

How costly are tech-support scams in the US?

The FBI IC3 recorded US$2.13 billion in losses and 47,794 tech-support scam complaints in 2025 (source: IC3 2025 report via Finsiders).

CERT.br — Cartilha de Segurança para Internet · FBI IC3 2025 Internet Crime Report (cópia do PDF) · FBI IC3 — Internet Crime Complaint Center · FTC — ReportFraud