Before You Let Someone Remote Into Your Computer

Do not give remote access to anyone who contacted you unexpectedly.

That is the safest rule. Remote support can be useful when you ask a trusted person or company for help. It is dangerous when it starts with a surprise phone call, pop-up warning, email, text message, browser alert, or person claiming your computer is infected.

Once someone has remote access, they may be able to see your screen, open files, change settings, install software, collect personal information, or pressure you into payments.

Ask who started the contact

Remote support is much safer when you started the request.

A real example: you call your internet provider using the number printed on your bill, ask for help, and the technician walks you through a support session.

A dangerous example: a pop-up says your computer is infected and tells you to call a number. The person on the phone says they need remote access immediately.

Unexpected contact plus urgency is a warning sign.

Verify the company separately

Do not trust the phone number inside a pop-up, email, text message, or search ad. Open the company's official website yourself, use a known bill or account page, or call a number you already trust.

Scammers often pretend to be from Microsoft, Apple, Google, your bank, your internet provider, or a local repair shop.

Close private information first

Before a legitimate support session, close anything the helper does not need to see. That includes email, bank pages, tax documents, medical records, password managers, private photos, and business files.

A support person does not need your password manager open on screen.

Never reveal passwords or codes

A helper may need you to sign in to your own account, but they should not need to know your password. Type passwords yourself. Do not read them aloud. Do not send them in chat. Do not approve sign-in prompts you did not cause.

Also do not share two-factor authentication codes, recovery codes, card numbers, gift card numbers, cryptocurrency wallet information, or bank login details.

Watch the whole session

Do not walk away while someone is controlling your computer. Watch what they open, what they download, and what settings they change.

A legitimate helper should be able to explain what they are doing in plain language. Pressure, anger, secrecy, or rushing are all reasons to end the session.

End the session when the job is done

Make sure the remote session is closed. If you installed a one-time support tool, uninstall it afterward unless you have a clear reason to keep it.

Restart the computer. Then check that nothing is still connected.

What to do after a suspicious session

Disconnect from the internet.

Use a different trusted device to change important passwords, starting with email, banking, and primary accounts.

Contact your bank or card provider if payment information was shown or shared.

Run a security scan.

Get help from a trusted local technician if you are not sure what was installed.

Remote support should make you feel more in control, not less. When someone pushes you to act fast, pay fast, or ignore your instincts, stop.

Sources and further reading

• FTC Consumer Advice: Tech support scams — https://consumer.ftc.gov/features/pass-it-on/impersonator-scams/tech-support-scams
• Microsoft Support: Protect yourself from tech support scams — https://support.microsoft.com/en-us/office/protect-yourself-from-tech-support-scams
• Google Help: Avoid and report phishing emails — https://support.google.com/faqs/answer/2952493?hl=en