Recognizing Fake Customer Support and Phishing Messages

A message that looks like it’s from a platform’s support team is one of the more common ways an account actually gets compromised — not through a technical exploit, but through someone simply being asked, and asked convincingly.

Requests real support never makes

• Asking for your password directly. No legitimate support process needs your actual password.
• Asking you to read out or forward a one-time code you just received. This is the single most common phishing pattern in this category — the code exists specifically to prove the request came from you, not to be shared with anyone claiming to help.
• Asking you to install a “verification” or “support” app to resolve an issue.

Other patterns worth noticing

• Urgency: “your account will be locked in 10 minutes” is a pressure tactic, not how real account issues are typically communicated.
• A support contact that reached out to you first, rather than one you contacted through a channel you found yourself.
• Requests to move the conversation to a different app or platform partway through.

What to do instead

If you think there’s a real issue with an account, go back to the platform’s own app or verified website and find its support contact yourself — don’t use contact details provided in the message that raised your suspicion in the first place. See our login safety checklist for the account-identity side of this, and our guide to protecting a mobile gaming account for the broader picture.

The pattern is consistent across almost every version of this scam: it works by making you act before you verify, not by being technically sophisticated. Slowing down is most of the defense.

What these messages look like

Typical examples seen around gaming apps (names changed):

• “Dear user, your withdrawal of ₹4,850 is on hold. Complete KYC within 30 minutes: [link]”
• “Customer care here. Your account is blocked due to suspicious activity. Share the OTP sent to your number to unblock.”
• “Congratulations! You are selected for VIP cashback. Install [app] so our agent can activate it.”

Each one combines a money hook, a deadline, and a request: a link, an OTP, or an install.

The screen-sharing trap

A common step in these scams is asking you to install a remote-access app such as AnyDesk or TeamViewer QuickSupport “so support can help”. Once installed, the scammer can see your screen, including OTPs and banking apps. No gaming app’s support needs remote access to your phone. If you have installed one at someone’s request, uninstall it and follow what to do after installing a suspicious app.

Where to report

• Money lost: the National Cyber Crime Helpline on 1930 or at cybercrime.gov.in. Call quickly, since early reports have the best chance of freezing funds.
• Fraud calls, SMS, or WhatsApp messages: the Chakshu facility on the government’s Sanchar Saathi portal.
• Then check the app’s own in-app support, found yourself, to confirm whether anything is really wrong. See how to verify real customer support.