The full Thanksgiving setup guide: protect an elderly parent's Windows 11 PC from remote-access scams
Use the Thanksgiving visit to close the doors scam callers use: unused remote apps, an admin account, saved passwords, bank alerts and one family rule.
If you're going home for Thanksgiving, set aside an hour for your parent's computer. Most tech-support and "bank fraud team" scams need one thing: the caller connecting to the PC with a remote access app. This checklist closes the easy ways in, then sets up a family rule so a call goes to you first. It lowers the risk; nothing makes a PC fully scam-proof.
Short on time? The 20-minute holiday checklist covers the essentials.
Why this matters
The FBI's 2025 Internet Crime Report counts 47,794 tech-support scam complaints and about $2.1 billion in reported losses (IC3 2025 report). Most of these scams follow the pattern in how to protect an elderly parent's computer from scammers: a scary pop-up or call, then "let me connect to fix it".
Before you touch the computer: 10 minutes of talking
Start with a story, not a lecture. Ask whether they've ever had a pop-up or a call about a virus. Then agree on two things:
- The rule: "If anyone calls, texts or pops up asking to get into the computer or to move money, I hang up and call you." Write your number on a card by the PC.
- The fact: Microsoft says its error and warning messages never include a phone number, and it doesn't make unsolicited calls to fix your computer (Microsoft Support). That one fact covers most of these calls.
Practice one sentence out loud: "I don't do anything on my computer over the phone. I'll call you back."
The Windows 11 checklist (about 45 minutes)
1. Remove remote access apps they don't use (10 min)
Open Settings, Apps, Installed apps and sort by install date. Remove AnyDesk, TeamViewer, ScreenConnect, RustDesk or similar tools they don't recognize. Step-by-step: block AnyDesk and TeamViewer on a home PC.
2. Deal with Quick Assist (5 min)
Quick Assist comes with Windows 11 and is a common scam tool. If nobody in the family uses it, uninstall it. It can come back from the Microsoft Store, so check again on your next visit. How to: turn off Quick Assist on Windows 11 Home.
3. Give them a standard account and keep the admin one (10 min)
Most parents sign in as an administrator, so any app a caller names installs in a few clicks. Create a separate admin account that you keep the password for, then change theirs to standard under Settings, Accounts, Other users, Change account type. Windows will then ask for the admin password before most installs. Some remote tools can run without being installed, so this lowers the risk but doesn't close the door. More options: block remote access on Windows 11.
4. Updates and Windows Security (5 min)
Open Settings, Windows Update and install what's waiting. In Windows Security, check that virus and threat protection is on.
5. The browser (5 min)
Remove extensions they don't recognize. Turn off saved card details in the browser's settings, so a caller watching the screen sees less. Set the home page to something simple they trust.
6. Email and bank (10 min)
Their email is the key to every other account, so give it a strong password and a recovery phone that's theirs or yours. With them, ask the bank about alerts for large transfers and new payees, and whether it lets them add a trusted contact. Tape the bank's number from the back of the card next to the PC.
Questions families ask
"They hung up and deleted AnyDesk. Is that enough?" It's the right start. Callers often add a second tool the same day, so check Installed apps sorted by date, change the email and bank passwords from another device, and call the bank on the number on the card. Full steps: a scammer had remote access: what to do now.
"A scan found and removed threats. Is the PC clean?" Not necessarily. Remote tools like AnyDesk or ScreenConnect aren't viruses, so a scan may leave them in place. If anything odd comes back after the scan, back up documents and photos and use Settings, System, Recovery, Reset this PC with "Remove everything".
"How do we make it less likely to happen again without taking over Mom's life?" One rule, a few settings, and no blame. Make it clear she won't be judged for calling you. Shame is what keeps people on the line.
"Should I set up TeamViewer so I can help from home?" Only if you'll really use it, and only with a password and settings you control. Every remote app left on the PC is one more thing a caller can ask her to open.
After you leave
Set a regular time to call and ask about anything odd that week. Check Installed apps again at Christmas. If something does go wrong while a caller is still on the line, have them follow our two-minute checklist first. After that, the what to do after a remote access scam guide is the next page to open.
If you want a second line of defense
Rules and settings depend on someone remembering them while a convincing caller is talking. Xcelcor Guardian for Windows 11 adds a check: new connections from common remote tools such as Quick Assist, AnyDesk, TeamViewer, ScreenConnect, RDP and Chrome Remote Desktop wait until someone you trust approves them, by email or on xcelcor.com. Her PC only gets a Refuse button, so the yes is not hers to give while a caller is talking. It lowers the risk; it can't prevent every scam.
You can try it free for 14 days on one PC, with no card needed. The Family plan covers up to five PCs, and through Dec 1 (11:59 PM ET) the code HOLIDAY15 takes 15% off any yearly plan.
Last updated