High riskTech Support In-depth guide 9 min read

Remote Access Scam

In this scam, a caller or pop-up convinces you to install remote-access software so 'support' can fix an issue, then uses the control to view your screen, steal data, and move money.

Quick verdict

Risk level
High risk
Scam type
Remote-access takeover
Main red flag
Anyone asking you to install software so they can access your device.
What to do first
Refuse and disconnect; never grant remote access to an unsolicited contact.

How this scam works

A pop-up warns that your computer is infected and gives a number to call, or a caller claims to be from "Microsoft," "your internet provider," or "tech support" about a problem you did not know you had. The fix they offer is always the same: let them connect to your device remotely so they can "clean" or "secure" it. Handing over that access is the entire scam, and it is one of the most dangerous because it gives criminals direct control of your machine.

Once connected, a scammer can open your files, log your keystrokes, install real malware, and watch you log in to your bank. A common finale is the "refund" trick: they claim to have accidentally refunded you too much and, while controlling your screen, manipulate what your bank balance appears to show, pressuring you to send back money that was never there. Older adults are disproportionately targeted and suffer the largest losses.

The rule that defeats every version is simple: no legitimate company cold-calls or pops up a warning asking to remotely access your computer. Never install remote-access software (names like AnyDesk or TeamViewer are often abused) at the request of an unexpected caller, and never let anyone you did not contact take control of your device.

If your message looks slightly different, check the Fake Virus Pop-up Scam or the Refund Recovery Scam, both are close cousins of this pattern. Every related guide lives in the Tech Support & Computer Scams guides, and the scam checker can scan the text you received.

A typical example

Example pattern, not a real report
Example pattern: 'To fix your problem, download this tool and give me the access code so I can connect to your computer.'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

The tell here: Anyone asking you to install software so they can access your device.

A real-world scenario

Anonymised, illustrative scenario

An illustrative example

George saw a full-screen pop-up warning that his computer was infected and to call the number shown "before his data was lost." He called; a helpful technician asked him to install a program so he could remove the virus. Once connected, the technician said George was owed a refund and would process it, then claimed to have sent too much and asked George to buy gift cards to repay the difference.

The gift-card request broke the spell, no real company asks to be repaid that way. George disconnected, shut down the computer, and had it checked by a trusted local shop. He had installed the software but sent no money. He changed his passwords from a different device. This is a fictional example of a classic remote-access scam.

By the numbers

$2.7B
reported lost to imposter scams in the US in 2023, which include tech-support fraud
Source: US Federal Trade Commission
Older adults
are the group most affected by tech-support scams, with the highest reported losses
Source: FBI Internet Crime Complaint Center

Step by step: how the scam unfolds

  1. The alarming triggerA pop-up, email, or cold call warns of a virus, hack, or account problem and urges you to call a number.
  2. The "support" pitchA "technician" offers to fix it and asks you to install remote-access software so they can connect.
  3. Access grantedWith control of your screen, they show fake "evidence" of infection to justify further steps and payment.
  4. Payment or data theftThey charge for bogus fixes, install malware, or capture logins as you type them.
  5. The refund reversalThey claim an over-refund and manipulate what your screen shows to pressure you into sending money back.

Warning signs

  • A request to install remote-access software
  • An unsolicited caller or pop-up offering to 'fix' your device
  • A request for an access code or to share your screen
  • Pressure to act before your 'data is lost'
  • An offer to log in to your bank to 'refund' you

Variations to watch for

Refund / overpayment reversal

The "technician" fakes an over-refund and pressures you to send back money by gift card or transfer.

Internet-provider impersonation

A caller claims your router or connection is compromised and needs remote access to "secure" it.

Subscription-renewal invoice

A fake antivirus renewal email invites you to call to "cancel," leading to the same remote-access pitch.

Bank-partner escalation

The scammer loops in a fake "bank" to move your money to a "safe" account while they watch your screen.

Your safest response

  • Refuse remote access to unsolicited contacts
  • Disconnect and remove any remote-access app you installed
  • Run a security scan and change key passwords from another device
  • Contact your bank if you logged in or shared details

How to verify safely

  • Never install remote-access software or grant control to someone who contacted you unexpectedly.
  • Ignore pop-ups and calls claiming your device is infected; genuine companies do not work this way.
  • If you need help, contact a technician or company you sought out independently, not a number from a warning.
  • Never pay for "support" with gift cards, and never repay a "mistaken refund", it is a manipulation.
  • If you granted access, disconnect, run a security scan, and change passwords from a different, trusted device.

If you have already engaged

  • Disconnect from the internet and remove the remote-access software
  • Run a security scan and change passwords from a trusted device
  • Contact your bank immediately if banking was open
  • Watch for unauthorised transactions and follow-up calls

What to avoid

  • Do not install remote-access software for unsolicited 'support'
  • Do not share access codes or your screen
  • Do not log in to your bank while someone is connected

You might also see

High risk Tech Support

Fake Virus Pop-up Scam

In this scam, a full-screen pop-up or alarming web page claims your device is infected and urges you to call a 'support' number or download a fix, leading to remote access or bogus payments.

Created by Scam or Safe Editorial Team
High risk Bank & Payment

Refund Recovery Scam

In this scam, a caller claims you are owed a refund, gains remote access to your device, moves money between your own accounts to fake an overpayment, then pressures you to 'return' the difference to them.

Created by Scam or Safe Editorial Team
High risk Tech Support

Microsoft Support Call Scam

In this scam, a caller claims to be from Microsoft or Windows support about detected errors, expired licences, or security issues, pressuring you to install remote-access software or pay to 'fix' your PC.

Created by Scam or Safe Editorial Team

Questions people ask

Why is remote access so dangerous?
It lets the scammer see and control your device, including your banking, and move money or steal data. Never grant it to an unsolicited caller or pop-up.
They said they'd refund me via remote access. Safe?
No. 'Refund' via remote access is a trick to move your money while you watch. Disconnect and contact your bank.
I gave access. What now?
Disconnect, remove the software, run a scan, change passwords from a trusted device, and contact your bank if banking was open.
Is legitimate remote support ever okay?
Only if you contacted a trusted provider through official channels. Never with an unsolicited caller or pop-up.

Sources & further reading

The figures and guidance above draw on publicly available data and advice from fraud-prevention authorities. Always confirm current reporting details through official government sites.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.