Remote Access Scams

Remote access scams are a broad category covering any fraud in which the scammer persuades you to install legitimate remote-control or screen-sharing software and grant them access to your device. The tools used are real, legitimate applications — the fraud lies entirely in who is using them and for what purpose.

These tools have genuine uses in IT support: a real technician at your workplace may use them to help you troubleshoot a problem. Scammers have adopted the same tools because granting access to them feels less alarming than handing over a password — it feels like watching someone work, not like giving them your keys.

Once connected, the scammer has full control of everything on your screen. They can read saved passwords and stored files, access your banking applications, make transfers, add payees, capture one-time authentication codes, and install malware that persists after the session ends. Some scammers dim the screen during the most sensitive actions so you cannot see what they are doing.

Remote access is the endpoint of many other scam types — fake tech support calls, browser lock pages, and fake antivirus scams all frequently escalate to a remote-access request. It is also used in bank impersonation scams and fake police or investigator scenarios.

The scammer establishes a pretext that makes the remote-access request seem reasonable. Common pretexts include: a technical problem they need to fix on your device, a bank fraud they need to investigate, a refund they need to process, or a police operation requiring your assistance. Each pretext is designed to frame the request as something being done for you rather than to you.

They guide you to download a specific remote-access tool and provide a session code. These tools install quickly and are designed to be user-friendly — walking someone through the process takes only a few minutes. Once you enter the code and grant access, the scammer's screen shows everything on yours.

A common technique is to ask you to log into your online banking 'so we can verify your account is safe' or 'to process your refund'. Once you have logged in, they may dim your screen, navigate to your account independently, or guide you through actions you do not fully understand the consequences of.

Some scammers use screen control to plant fake evidence — displaying fabricated transaction lists or error screens — to convince you that the problem is worse than it is and that you must pay more to resolve it.

After the session ends, malware installed during the session can maintain persistent access, allowing the scammer to return to your device without your knowledge.

The scam succeeds because it inverts the usual framing of danger. You are not being asked for your password — you are being 'helped'. The remote-access tool is real software used by real support teams, which makes it feel legitimate. The person on the call is often friendly, professional, and patient, which builds trust over the course of the interaction.

The pretext is calibrated to your situation. Bank fraud investigations feel urgent and serious. Technical problems feel like they need expert help. Law enforcement scenarios feel dangerous to ignore. Each creates a different emotional state — urgency, confusion, fear — that reduces the likelihood of pausing to evaluate the request critically.

Once connected, the session feels collaborative. You are watching someone 'fix' things, which reinforces the belief that this is genuine. By the time you understand what has happened, the session is over.

A person receives an unsolicited call from someone claiming to be from their bank's fraud prevention team. The caller says an unauthorised payment attempt has been detected and asks them to install a security application to help investigate. The person installs the software and shares the access code. The caller asks them to log into their online banking 'to verify the account'. The screen dims. After a few minutes, the caller says everything is resolved and ends the session. The person later discovers that two payments were made to new payees added during the session.

To secure your account, install [remote tool] and give me the access code so I can protect your funds.

Our bank fraud team needs to access your device to investigate suspicious activity. Download [remote tool] from [fake link].

We're processing your refund. Please log into your bank while I am connected so I can credit the right account.

This is IT support. Your device is sending error signals. Download [remote tool] and read me the code on screen.

The police are investigating an account in your name. To clear your name, we need to see your device. Install [remote tool].

Your warranty support entitles you to a remote tune-up. Please install [remote tool] and share the session code.

The core principle is simple: if you did not initiate the contact, do not grant remote access. Legitimate support teams at real companies do not cold-call you and ask you to install software.

If you receive a call from someone claiming to be your bank's fraud team and asking you to install software, hang up. Call your bank directly on the number on the back of your card or on their official website. They will either confirm the call was genuine (very unlikely) or confirm it was fraud.

If you have a legitimate IT support request — for example, a technician at your workplace — verify their identity through a channel you control before granting access. Call the IT department's number directly, not one they give you.

Never log into your bank, email, or other accounts while a remote session is active with someone you do not personally know and trust.