Remote-access scams can expose files, saved passwords, email, financial accounts, and installed software, so closing the pop-up is only the beginning.
What this usually means
Remote control changes the scope because the stranger may have viewed the screen, installed software, copied information, changed settings, or used an already signed-in account. Disconnect the affected computer, list the remote tools and accounts that were open, protect email and financial access from a separate trusted device, and preserve the event timeline before removing evidence.
Practical checks and decisions
Disconnect the computer and end communication with the scammer
For “disconnect the computer and end communication with the scammer,” end the contact and do not use the warning’s phone number, link, or download. Preserve the message, number, software name, receipts, and sequence of events before closing or cleaning anything.
Contact banks or payment providers through known official channels
Use “contact banks or payment providers through known official channels” to determine what the stranger actually obtained: screen access, files, passwords, payment details, or money. Contact banks and account providers through independently verified channels from a trusted device.
Change exposed passwords from a separate trusted device
Before completing “change exposed passwords from a separate trusted device,” confirm that you control the recovery email, phone, and authenticator. Save backup codes somewhere separate from the computer and never give a caller, pop-up, or remote technician a one-time verification code.
Arrange computer review and check accounts for unfamiliar access or forwarding rules
After “arrange computer review and check accounts for unfamiliar access or forwarding rules,” watch for new login alerts, password-reset messages, sent mail, and changed account rules. Those clues help determine whether the concern ended with one login or requires a wider account review for what to do if a scammer had remote access to your computer.
When a professional diagnosis makes sense
For what to do if a scammer had remote access to your computer, get help when money, passwords, email, remote access, or unfamiliar account activity may be involved. Preserve a timeline, avoid further contact with the suspected scammer, and make account changes from a trusted device.
For hands-on or remote help, review the related service, or browse the Help Center for another guide.
