Perhaps somebody called claiming to be from Microsoft, your broadband provider or your bank. They said there was a serious problem with your computer and asked you to install a programme so they could fix it. You followed their instructions, and now you’re worried they weren’t genuine.
If that sounds familiar, the most important thing is to stop the remote connection and protect your accounts. You don’t have to know exactly what the scammer did before taking sensible action.
These scams are designed to look convincing. The person on the phone may sound professional, know your name and guide you through a series of apparently normal steps. This guide explains what to do next, in plain English.
First: What Does Remote Access Actually Mean?
Remote access software allows somebody to see or control a computer over the internet, even if they are somewhere else entirely.
It’s not automatically suspicious. Genuine IT support companies use remote access tools to help customers, with their permission. The problem is when a criminal persuades you to grant that access under false pretences.
Common remote support tools include AnyDesk, TeamViewer, Quick Assist and other similar applications. Finding one of these installed doesn’t, by itself, prove that you’ve been scammed. What matters is who you allowed to connect and what they did.
Step 1: Disconnect the Computer from the Internet
If you think the person is a scammer and the session may still be active, disconnect the affected computer from the internet straight away.
- If you’re using Wi-Fi, turn off Wi-Fi on the computer.
- If the computer is connected by an Ethernet cable, unplug the cable.
- If you cannot quickly disconnect it, shut the computer down.
This helps interrupt an active remote connection. You do not need to switch off the broadband router for everyone in the house if you can disconnect the affected computer instead.
Do not reconnect the computer just to check whether the scammer is still there. Leave it disconnected until you have a plan for checking it.
Step 2: Stop Speaking to the Scammer
End the phone call, close the conversation and don’t follow any further instructions.
The caller might insist that disconnecting will damage your computer, that your bank account is in danger or that you must pay immediately. These are common pressure tactics.
Don’t call a number displayed in a pop-up or supplied by the suspicious caller. If you need to contact a company, find its genuine contact details independently.
Step 3: Contact Your Bank If Money or Financial Information Was Involved
If you sent money, entered card details, opened online banking or showed financial information while the scammer was connected, contact your bank immediately.
Use the number on the back of your bank card, your bank’s official app or another independently verified contact method. Explain that you may have been the victim of a remote access scam.
Tell the bank whether you:
- Made a payment or transfer.
- Entered card details or banking passwords.
- Logged into online banking while the scammer could see your screen.
- Approved a notification or security code at the caller’s request.
- Allowed the caller to move money or control your screen.
The bank can advise on protecting your accounts, cards and payments. Acting promptly matters, even if you aren’t certain whether money has been taken.
Step 4: Change Important Passwords – Using a Different Device
Use a different, trusted device, such as your phone or another computer, to change passwords. Don’t type new passwords into the computer the scammer accessed until it has been checked.
Start with the accounts that could give somebody access to other information:
- Your main email account.
- Your Microsoft, Apple or Google account, as applicable.
- Online banking and financial accounts, following your bank’s advice.
- Any accounts you signed into while the scammer was connected.
- Any other accounts using the same password.
Choose new, unique passwords. Where available, turn on two-factor authentication (also called two-step verification).
Check account recovery details too. A criminal who accessed an account might have added their own email address, telephone number or trusted device. Look for unfamiliar sign-ins, forwarding rules and connected applications, particularly in your email account.
Step 5: Don’t Assume Closing the Remote Access Programme Is Enough
You may be tempted to open the computer, uninstall AnyDesk or TeamViewer and carry on as normal.
Removing the remote access programme is an important part of the clean-up, but it may not be the whole answer.
Depending on the access granted, a scammer might have:
- Installed additional remote access software.
- Changed settings so they can reconnect later.
- Viewed or copied files and personal information.
- Installed malicious software.
- Seen passwords or security codes you entered.
- Made changes to browser settings or online accounts.
Not every scammer will have done all of these things. The difficulty is that you may not be able to tell what happened simply by looking at the desktop.
Step 6: Have the Computer Checked Before Using It Normally
Before reconnecting and using the computer for banking, shopping or email, arrange a proper security check.
That might include reviewing installed programmes, startup items, user accounts, remote access settings, browser extensions and security alerts, as well as scanning for malware.
In some cases, the safest option may be to back up essential personal files and reinstall Windows from a trusted source. This is particularly worth considering if the scammer had extensive control or it isn’t possible to establish what they changed.
A security scan is useful, but a clean scan alone cannot guarantee that every change made by somebody with remote access has been reversed.
What If the Scammer Only Looked at My Screen?
The level of risk depends on what they could see and what permissions you gave them.
If they simply saw a screen containing no personal information, the risk may be relatively limited. If you opened email, documents, saved passwords or banking information, there is more to consider.
Remote access scams don’t always involve installing a virus. Sometimes the criminal’s main objective is to persuade you to reveal information or authorise a payment.
What If I Didn’t Pay Them Anything?
It’s good news if you didn’t send any money, but it doesn’t necessarily mean the incident can be ignored.
If the scammer controlled the computer, they may still have accessed information or altered settings. Follow the disconnection and account-security steps, then have the device checked.
What If I Gave Them a One-Time Security Code?
A one-time code sent by text, email or an authentication app is often used to confirm a login or sensitive action.
If you gave such a code to the caller, contact the relevant organisation through its official website or app and secure the account urgently. Change the password, review recent activity and sign out unfamiliar sessions where the service allows it.
Never share a security code with somebody who has called you unexpectedly, even if they claim to work for a bank or technology company.
What If the Scammer Says They’ve Locked My Computer?
Sometimes scammers display frightening messages or claim your files will be deleted unless you pay.
Don’t pay simply because somebody on the phone says the computer is locked. A full-screen message may be a browser page rather than a genuine system warning.
However, if files genuinely appear encrypted or inaccessible, avoid experimenting with unfamiliar repair tools. Keep the computer disconnected and get professional advice. Paying a criminal offers no guarantee that access will be restored.
Should I Tell Anyone Else?
If the scammer accessed a shared computer or accounts used by another family member, let those people know so they can protect their information too.
If it was a work computer, contact your employer or IT support immediately. Don’t attempt to investigate or wipe it yourself, as the organisation may need to preserve evidence and protect other systems.
How Do I Report a Remote Access Scam in the UK?
If you’ve lost money or disclosed sensitive information, report the incident to the police through the appropriate fraud reporting route. In England, Wales and Northern Ireland, the national service is Report Fraud. In Scotland, contact Police Scotland.
You can also report suspicious emails by forwarding them to , and suspicious text messages to 7726.
Keep useful evidence such as the caller’s number, emails, messages, payment references and the name of any remote access programme. Don’t delay contacting your bank while gathering evidence.
How Can I Avoid This Happening Again?
A few habits can help:
- Be suspicious of unexpected calls claiming there is a problem with your computer.
- Don’t install remote access software because an unsolicited caller tells you to.
- Don’t trust phone numbers shown in frightening browser pop-ups.
- Never share passwords, banking details or one-time security codes with an unexpected caller.
- If you’re unsure, end the call and contact the organisation yourself using a number you know is genuine.
- Keep Windows, your browser and security software up to date.
Genuine technical support can sometimes involve remote access, but it should be something you’ve arranged with a provider you trust – not something you’re pressured into during an unexpected call.
Frequently Asked Questions
Can a scammer still access my computer after I hang up?
Potentially, yes. Hanging up the phone does not necessarily end a remote access session, and some software can be configured for later access. Disconnect the affected computer from the internet and have it checked.
Will turning off Wi-Fi stop a scammer?
Disconnecting the affected computer from the internet interrupts an active internet-based remote session. It does not undo changes already made, so further checks are still important.
Is uninstalling AnyDesk or TeamViewer enough?
Not necessarily. These are legitimate support tools, but a scammer could have made other changes while connected. Removing the programme doesn’t prove that the computer is safe.
Can scammers steal files through remote access?
Depending on the permissions and software involved, they may be able to view, copy or transfer files. It isn’t always possible to tell from the desktop whether files were accessed.
Do I need to buy a new computer?
Usually not. In many cases a computer can be checked, cleaned or securely reinstalled. Whether that is worthwhile depends on its condition, age and what happened during the incident.
Should I change passwords before or after the computer is checked?
Change important passwords promptly from a separate trusted device. Don’t wait for the affected computer to be checked, particularly if email or banking accounts may be at risk.
Worried Someone Has Accessed Your Computer?
If you’ve allowed somebody onto your computer and now suspect it was a scam, Barwell Computer Repair can help you work out the next steps.
We can check for unwanted remote access software and other suspicious changes, advise whether a Windows reinstall is sensible and help you get back to using your computer with confidence.
You don’t need to know the name of the programme they used or exactly what happened. Tell us what you remember, and we’ll explain your options clearly.
Computer & Laptop Repairs
