Scam Library
What to do after a remote access scam
After the session ends: disconnect, accounts, money, and what was installed.
Disconnect the PC from the network first. End any remote session that is still open. Assume a program they installed may still be there, including one set to start later.
From a different phone or computer, change email and banking passwords and turn on the strongest sign-in those services offer. If money moved, contact the bank from a number you look up, and keep the dates. In the United States you can also report what happened to the FBI’s Internet Crime Complaint Center.
Run a remote-access check on the affected PC before you treat it as ordinary again. A check tells you about today; it cannot refuse the next connection. That is what the 14-day Guardian trial is for, and it does not require a card.