Remote Access Scams on Email
Fraudulent emails pose as support, security, or billing alerts to lure victims into installing remote-access software that hands control of their device to scammers.
Part of: Remote Access Scams
Last reviewed: 1 June 2026
A remote-access scam often begins not with a call but with an email: a 'security alert', a 'subscription renewal', or a 'refund' notice that supplies a number to call or a tool to install. The inbox lends the message a paper trail that feels more official than a cold call.
The danger is never the email program itself but the action the message provokes — installing remote-control software or phoning a fake support line. Email suits scammers because branding and sender names are easy to imitate and a single template can reach many inboxes at once.
How this scam works on Email
The email warns of a virus, an unauthorised login, or a charge you did not make, and urges you to call a 'support' number or click a link to 'secure' or 'refund' your account. The goal is to get you into a live exchange.
On the call or chat, the 'technician' instructs you to install a remote-access application so they can 'fix' the problem. Once connected, they can view your screen, move money, plant malware, or fake a refund overpayment to demand you 'return' the difference.
The email's calm, official tone is the bait; the real harm happens the moment you grant remote control of your device.
Common red flags
- An email warns of a virus, breach, or charge and gives a number to call
- You are urged to install software so support can 'fix' your device
- The message claims a refund requires remote access to 'process'
- The sender address does not match the company's official domain
- You are pressured to act quickly to 'secure' your account
- The 'technician' asks you to log into your bank while connected
How to protect yourself
- Never install remote-access software at the request of an unsolicited email
- Do not call support numbers from an email — use the company's official site
- Treat virus, breach, or refund alerts in email with suspicion
- Never let anyone you did not contact view your screen or bank login
- Verify any charge directly through your bank or the official account portal
- Report the email via your provider's phishing tool and delete it
How to report it
- Use your email provider's 'Report phishing' function on the message
- Report the impersonation to the company being spoofed via its official site
- File a report with your national fraud or cybercrime reporting centre
Frequently asked questions
I already installed the remote-access software and let them connect — what should I do immediately?
Disconnect from the internet or shut down the device right away to end their access, then have the device checked by a trusted professional or reinstall the operating system if you're able to. Change passwords for important accounts from a different, uncompromised device, and contact your bank if they accessed any financial accounts while connected.
How do I uninstall remote-access software after a scam call?
Go to your device's installed applications list and remove the specific remote-access tool the scammer had you install, then restart the device. If you're unsure how to fully remove it, consider having a trusted professional check the device or reinstalling the operating system.
Can they still access my device after I close the remote-access session?
Not if the software is fully uninstalled and no other changes were made, but scammers sometimes install additional tools during a session that persist afterward. It's safest to uninstall the software, change your passwords from another device, and run a security scan.
Is it safe to install software a support email asks me to use?
No. Remote-access tools let someone control your device entirely. Never install one at the prompting of an unsolicited email. Legitimate companies do not ask you to do this to 'fix' a problem you never reported.
Sources for this guide are listed on the Remote Access Scams page (4 sources).