AnyDesk and remote-access apps: how the betting account scam works

A remote-access app lets another person see and control your phone. A scammer who persuades you to install one and accept a connection can open your betting app and mobile wallet as if he were you. No licensed operator or rule asks for this. If a caller wants it, end the call.

By WebTech Kenya Editorial (prepared with AI tools under our editorial policy) · Last updated 2026-11-14

The short answer

A remote-access app shares your phone screen and, once you allow it, lets the other person tap and type on it. In this scam a caller uses that to reach your betting app and your mobile-money wallet while you watch, so codes and PINs are entered by him, not by you. This guide describes the pattern from the victim's side so that you can spot it and respond; it is not a how-to for fraudsters.

The same fraud also exists with fake betting agents who ask for your login in a chat; that variant is covered in the guide on agents who offer to load or fix your betting account.

How the scam unfolds

It usually begins with a call or message that claims a problem: a blocked account, a stuck withdrawal, a failed verification or a refund owed. The caller sounds helpful and asks you to install a "support tool" and read out a numeric address it shows. AnyDesk's help centre describes this tactic: scammers pose as technicians or as AnyDesk staff, and it advises you to ignore cold calls.

Once you accept the connection, the caller can see everything on screen, including notifications that carry one-time codes. He may ask you to "open your account so I can check", then steer you to a deposit, a withdrawal or a wallet screen. Some callers ask you to turn the screen dark "for security", which hides what he is doing.

What the caller gains at each step

Why this scam works on a phone you control

Most account protections assume that the person tapping the screen is the owner. A remote session breaks that assumption without breaking any password: the app sees your own phone, your own saved login and your own number. That is why a second check such as a text code gives little protection once a stranger can see the message arrive.

The scam also borrows trust from the real world. Callers quote the name of an operator, a mobile network or a software maker, and they may know your name or number from an earlier leak. Knowing a detail about you is not proof of identity; see the guide on how betting companies get your phone number for how numbers circulate.

Warning signs

1. You did not start the contact

   AnyDesk's guidance is to ignore cold calls and to initiate contact yourself when you need help.

2. The helper wants control, not an explanation

   A genuine customer care agent can explain a restriction in words. He does not need your phone.

3. A deadline or threat

   "Your account will be closed in ten minutes" is pressure, not process.

4. A request for codes, PINs or an app install

   Any of these ends the conversation, whatever the caller's tone or claimed rank.

5. A blank or covered screen

   If someone asks you to hide the display during a session, stop the session.

Illustrative example

Illustrative example: your betting balance is KES 12,000 and your mobile wallet holds KES 8,000. Step 1: both are reachable from one unlocked phone. Step 2: exposure is 12,000 plus 8,000, which is KES 20,000. Step 3: if a caller moves half of the betting balance, that is 12,000 divided by 2, KES 6,000, and then drains the wallet, you lose 6,000 plus 8,000, which is KES 14,000, before you notice. Keeping a small wallet balance and never letting a stranger hold the phone is the only protection that works in time.

What to do if you accepted a connection

AnyDesk's own advice is to record all details and report the incident to local authorities. Keep screenshots, the caller's number and the time of the call. The National KE-CIRT/CC, run under the Communications Authority, takes incident reports online, by email or by phone, and the form lets you report without a name, though it then cannot reply to you.

Reducing the risk before anything happens

Switch on a second check on the account, as described in the guide on two-factor authentication for betting accounts, but remember it fails if you show the code to someone. Install apps only from official stores, a risk covered in the guide on APK files outside the Play Store. If you lose the phone itself, follow lost or stolen phone steps.

Operators carry duties too: a licensee must keep its online platform secure from cyber-attacks and hacking (Ops Regs r.50(1)) and report fraud to the Authority within twenty-four hours (r.91(2)). Those duties do not cover a connection you let into your own phone, so the decision stays with you.

18+. Gambling is addictive. Play responsibly, and if gambling is causing you harm, see the responsible gambling page for the GRA toll-free line.