Real Remote IT Support vs Remote-Access Scam
How legitimate IT support using remote access tools works versus scammers who use them to steal money and data.
Last reviewed: 1 June 2026
Remote access is a normal working tool, and plenty of genuine support is delivered that way. In real sessions you made the call, you know the company, the technician explains what they are doing, the work is narrow, and it ends when the problem is fixed. Scams use the same software, which is why they are hard to spot from the screen alone. The contact comes to you first, from a popup, a call, or a message, and there is a reason it must happen right now. Once connected, the technician manufactures a crisis, often steering you into opening your banking app to check for suspicious payments, and then guides you into moving money to keep it safe. You feel helped throughout. The distinction that matters is who made contact first.
Side-by-side comparison
| Real remote IT support | Remote-access scam | |
|---|---|---|
| Who initiates | You contact IT support via official, verified channels | They contact you first — via popup, call, or message |
| Remote tool | Uses a named, reputable remote-access product for a specific task | Urgently needs you to download remote access right now |
| Banking access | Never asks you to open banking or investment apps during a session | Asks you to log into banking 'to check for suspicious transactions' |
| Money movement | Does not instruct you to transfer money anywhere | Claims you've been 'overpaid' or need to move money to protect it |
| Duration | Session focused on the specific issue; ends when it is resolved | Extended session with escalating crises to keep you connected |
| Screen visibility | You can see everything the technician does and end the session any time | May blank your screen or obscure actions during the session |
| Payment | Payment via normal invoice or subscription — never gift cards | Demands gift cards, wire transfer, or crypto for 'repairs' |
Common red flags
- You were contacted first — unsolicited call, popup, or message
- Urgency to install remote-access software before you can think
- Technician navigates to your banking or investment app
- Claim that you were 'overpaid' and must transfer money back
- Screen goes blank during the session without your consent
- Payment by gift card, cryptocurrency, or wire transfer
- Threats that your device will be disabled if you end the session
Verification steps
- Only initiate remote-access sessions by contacting support via official, verified contact details
- Verify the technician's identity and the company they represent before granting access
- Monitor every action taken on screen and end the session immediately if banking apps are opened
- After any remote-access session, change your passwords from a different device as a precaution
- Check your bank statements and account activity in the days following any remote-access session
What not to do
- Don't grant remote access to anyone who contacts you first
- Don't allow a remote technician to access your banking or investment accounts
- Don't transfer money at a technician's instruction during a support session
- Don't pay for support services with gift cards or cryptocurrency
- Don't continue a session after seeing actions you didn't authorise
A safe response
If something feels wrong, end it. Close the remote-access program from your taskbar or system tray, and if the screen is blank or frozen, hold the power button until the device shuts down. That will not damage anything. Say nothing more to the caller and hang up. Then, from a different device, change the passwords on your email and banking. Ring your bank on the number on the back of your card and tell them a remote session took place, so they can watch the account and stop pending payments. Uninstall the remote tool, run a scan with your own security software, and report it to your national fraud authority.
Frequently asked questions
How do I end a remote session safely if I feel uncomfortable?
Close the remote-access application directly — look for it in your system tray or taskbar. If the screen is blank or you can't reach the application, hold the power button to force a shutdown. You will not damage your device by doing this.
My company's IT team uses remote access — is that different?
Yes. Company IT support operates through known, pre-arranged systems on work devices within a managed environment. Treat any remote-access request outside that established system with caution, even if the caller claims to be from your IT department.
What should I do after a suspected remote-access scam?
Disconnect from the internet, change all passwords from a different device, contact your bank to flag any exposed accounts, and run a security scan with reputable software. Report the incident to your national fraud authority.