I feel if everything they said is true, then this is a reasonable solution. But from my many Youtube scammer video experience, like people have already mentioned, most scammers use standard remote access software, not some bespoke APK.