Before You Let Someone Remote Into Your Computer, Read This

Remote-access software is a real support tool, but it also gives scammers a powerful way to control a victim’s computer. Do not install or open a remote-control tool for someone who contacted you unexpectedly and claimed there is a problem with your device or account.

The important question is who initiated the support session

Legitimate technicians sometimes use remote support. The danger is treating an unsolicited caller, pop-up, text message, or email as proof that the person requesting access is legitimate.

The Federal Trade Commission warns that tech-support scammers may pretend to be from a well-known company, claim your computer has a serious problem, and ask for remote access. A frightening warning on a website does not establish that the person behind its phone number represents Microsoft, Apple, your bank, or anyone else it names.

Verify support independently

If you genuinely need remote support, start from a contact method you independently know is legitimate: for example, the official support site for the product, a support number in your account or documentation, or a local provider you intentionally hired.

Do not verify a suspicious message by calling the number contained in that same message. That simply sends you back to whoever created it.

What remote access can expose

Depending on the software and permissions involved, a remote operator may be able to view your screen, move the pointer, type, open programs, and interact with files. That is enough access to create serious risk if the operator is dishonest.

Do not sign into banking, email, password-manager, or other sensitive accounts at the direction of an unverified remote technician. Never provide one-time security codes simply because a caller says they need them for support.

If you already gave a stranger access

Disconnect the computer from the internet if the suspicious session is still active. End the remote session and do not reconnect at the caller’s request.

From a different trusted device when practical, change passwords for important accounts that may have been exposed, beginning with your primary email account. Review account security and recent sign-ins, and contact your financial institution directly if banking or payment information may have been involved.

Then use the built-in or otherwise trusted security software on the computer to perform a scan. Remove remote-access software you do not need or recognize. If you are unsure what was changed, get help from a trusted technician rather than the person who initiated the suspicious contact.

If money was sent or financial information was exposed, act promptly through the financial institution’s official contact channel. Do not pay a second person who promises to recover money for an upfront fee.

Sources and Further Reading

Federal Trade Commission — Tech support scams Federal Trade Commission — What to do if you were scammed CISA — Secure Our World consumer cybersecurity guidance