Remote-access banking scams: what to do if someone controlled your device
Stop remote access, contact the bank from a safe device and secure accounts after a fake support or investment-adviser call.
End the connection, disconnect the affected device from the internet and contact your bank from a different trusted device. Explain the remote access and any payments or codes involved. Secure accounts and get trusted technical help before using the device for sensitive activity again.
Remote-support tools can have legitimate uses. The danger arises when an unverified caller uses one to view your banking, direct a transfer or capture credentials. A caller who knows your name or shows an alarming screen is not necessarily genuine support.
This guide concerns immediate harm reduction. If money is moving, do not spend the first hour troubleshooting software while leaving the bank uninformed. Use a safe device or phone to contact the real provider promptly.
Break the connection and reach the real bank
End the remote session if you can and disconnect internet access on the affected device. Do not rely on the caller’s instructions to remove the software. Contact the bank through a known official channel using another trusted device.
Tell it that someone had remote access, when the session started and what they could see. Ask about blocking account access, stopping pending payments, replacing exposed cards and reviewing recent transactions. If you are unsure what was approved, say so and describe the sequence instead of guessing.
Secure the accounts behind the banking account
Email can be used to reset other passwords, so protect it alongside banking and exchange accounts. From a trusted device, change compromised passwords, revoke unknown sessions and examine recovery contacts and forwarding rules. Turn on multi-factor authentication where available.
If you shared a one-time code, tell the relevant service what the code was for without reposting it. Contact your mobile provider if the phone account or SIM may be compromised. Do not approve later prompts simply because the original caller says they are needed to “cancel” the fraud.
Have the device checked safely
Uninstalling one visible app may not resolve every risk. Update security software and obtain help from a trusted technician or the relevant official cyber-security guidance. A device reset may be appropriate in some cases, but consider a safe backup and needed evidence first.
Do not hire technical help through a pop-up, sponsored recovery offer or another unsolicited support call. The same impersonation problem can recur. If this is a work device, inform your employer’s security team promptly and follow its process.
Preserve the session facts and payments
Record the support-tool name, caller details, approximate times and the instructions given. Save messages, receipts and screenshots already available without restarting unsafe access. Note which actions you took and which appeared to be performed by someone else.
Use that sequence in the bank report and police report. Remote access can be relevant to a payment assessment, but it does not automatically settle liability worldwide. Request the bank’s written reasoning if it reaches a conclusion that conflicts with the facts.
A short checklist
- Disconnect remote access and the device’s internet.
- Call the real bank from a safe device.
- Secure email, financial accounts and recovery settings.
- Get independently verified technical help.
- Record the session and disputed payments.
Common questions
Can I keep using the device after deleting the app?
Do not assume deletion alone establishes safety. Get the device checked and use a trusted alternative for banking and password changes in the meantime.
What if I approved a transfer during the session?
Explain that accurately, including what you were told and what the scammer controlled. Different local rules may apply to approval under deception and transfers made without permission.
References
- What to do if you've been scammedASIC Moneysmart · Australia
- What to do if you were scammedFederal Trade Commission · United States; practical prevention guidance
- How to recognize and avoid phishing scamsFederal Trade Commission · United States; security guidance
- APP fraud reimbursement protectionsPayment Systems Regulator · United Kingdom
- What to do if you are a victim of fraudCanadian Anti-Fraud Centre · Canada
