Remote Access Scam: When Tech Support Asks to Take Over Your Device

How it starts

The approach can come in several ways: a call from someone presenting himself as a tech support representative, a threatening message that pops up on the computer screen, or a person who calls and says he detected suspicious activity on your device or your account.

How it works

The attacker guides you to download a screen-sharing or remote-control app, explaining that it is only to check or to fix. Once he is connected, he asks you to log in to your bank account, supposedly to make sure everything is fine. He sees the passwords and codes you type. Sometimes he also shows a fake screen that looks as if you were refunded too much money, and demands that you send back the difference.

What the scammer wants

The attacker wants access to your bank account and the money in it. Screen sharing lets him see everything, and remote control lets him act himself. The final goal is to take money out, or to get you to transfer it yourself.

Common phrases

• Hello, I am from tech support, we detected a problem on your device
• So I can fix this, please install this app
• Log in to your bank account so we can make sure your money is protected
• We accidentally refunded you too large an amount, you need to return the difference
• Do not turn off the computer, I am handling this now

Red flags

• An unexpected contact about a problem with your computer, phone, or account
• A request to install an app so that someone can fix it remotely
• A request to log in to your bank account while screen sharing is active
• A claim that you were refunded too much money and must return a difference
• Pressure to stay at the device and not turn it off

What to do now

• Hang up the call and do not install any app at the request of someone who called you
• If you already installed a remote access app, disconnect the device from the internet and remove it
• Do not log in to your bank account while someone is connected to the device or can see the screen
• If you logged in to the bank during the call, change the password immediately and contact the bank
• A real company does not start a call and ask to take over your device

Example scenario

Yossi gets a call from a man who presents himself as a support representative and says malware was detected on his computer. He patiently guides Yossi to install an app that will let him fix it remotely. Then he asks Yossi to log in to the bank to check that no money was stolen. While Yossi types, the attacker sees everything. By the end of the call, thousands of shekels are missing from the account, and there was never any malware there in the first place.

Prevention tips

• A simple rule: no one who calls you needs access to your computer or your phone
• Do not install screen-sharing or remote-control apps at the request of an unknown party
• If there is a problem with the device, contact a known technician on your own, not whoever contacted you
• Installing software and logging in to the bank at the same time is a dangerous combination, avoid it
• Explain to older family members that real tech support does not ask to take over the device

Full description

The remote access scam turns your wish to get help into a weapon. It starts with a problem, real or invented, and continues with an offer of a solution: a kind, professional person ready to guide you. The central step is installing software that shares your screen or gives full control of the device. Once it is installed, the attacker can see your screen, open the browser, and open the banking app. He does not need to break into anything, you opened the door for him yourself.