I’ve been scammed

I let a scammer into my computer or phone: what to do now

Fake tech support callers and pop-ups often ask you to install a remote-access app so they can “fix” your device. With that access they can see your screen, install software, and get into your accounts. Disconnect now, remove what they installed, and change your passwords from a different device.

By Clutterstrike · Last reviewed · 1 min read

If they’re still connected or on the phone, start with step 1.

Do this now

  1. Hang up and disconnect. End the call, then turn off Wi-Fi or unplug the internet cable so they can’t stay connected.
  2. Remove the software they had you install. Uninstall any remote-access or “support” app you installed during the call. If you’re not sure which one it was, look at your recently installed apps.
  3. Update your security software and run a full scan. Remove anything it flags. If you need help, go to the device maker or a repair shop you already trust, not anyone who contacted you.
  4. Change your passwords from a different device, starting with email and banking, and turn on two-step verification.
  5. If you paid them or they saw your banking, call your bank or card issuer’s fraud line now, using the number on your card. Then follow I sent money to a scammer.

How these scams usually go

It often starts with a pop-up warning that your computer is infected, with a number to call, or a call from someone saying they’re from a well-known tech company. Once connected, they “find” a problem and charge you to fix it. Some say your accounts were hacked and hand you to a fake government agent who tells you to move your money. That’s a lie. Real tech companies don’t call you out of the blue, and real agencies never ask you to move money to protect it.

Report it

Report the scam at ReportFraud.ftc.gov (opens in a new tab). If money was lost online, you can also report it to the FBI at ic3.gov (opens in a new tab).

Got a follow-up message? Check it first

Paste the text, email, or link below. The check runs in your browser, and nothing you paste is uploaded.

Your text
Runs in this page. Nothing is uploaded.

Paste the message or link, then press Check it.

Did anything else happen?

Scams often involve more than one thing. Pick anything else that applies for its steps.

Written by Clutterstrike

Clutterstrike makes Cluttersignal, a browser extension that checks emails, texts, links, and websites for signs of a scam. Our guides are written by the team and checked against official guidance from the agencies listed in the sources.

Last reviewed

Sources