The App Permissions That Can Empty Your Bank Account

The most dangerous moment with a betting app is not placing a bet — it is the install screen, where you tap “Allow” without reading. A few specific permissions can hand criminals the keys to your bank account.

The three permissions that matter most

  • Read SMS. Your bank sends one-time passwords (OTPs) by text. An app that can read SMS can capture those OTPs and authorise payments without you.
  • Notification access. Even without SMS permission, an app that reads notifications can see OTP messages as they pop up on screen.
  • Accessibility services. This is the most powerful of all. It lets an app see everything on your screen and even tap buttons for you — effectively remote-controlling your phone.

Why a card game never needs these

A rummy or slots game needs internet access and maybe storage. It has no legitimate reason to read your text messages, watch your notifications, or control your screen. When an app demands these, the request itself is the red flag.

How to check and revoke permissions

On Android, open Settings, then Apps, pick the app, and tap Permissions to see and switch off anything it does not need. To find the most dangerous one, search Settings for “Accessibility” and review which apps are enabled — turn off any you do not recognise. Do this now for every app on your phone, not just games.

If an app refuses to work unless you grant SMS, notification, or accessibility access, do not grant it. Uninstall instead.


Get help or report a scam

If you’ve lost money to a scam app, report it at cybercrime.gov.in or call 1930. If gambling is affecting your life or someone you love, you can reach the free, confidential mental-health helpline Tele MANAS at 14416. Asking for help early is a strength, not a weakness.

This article is for consumer awareness and harm prevention. It is not legal or financial advice.

Scroll to Top