Start with the right checks.
Remote access given to an unverified person deserves prompt attention. Record what the person asked you to do and what access or information was involved.
What to do next.
End the remote session and stop following the caller’s instructions.
Contact a support provider you independently know through its established details, using another trusted device if needed.
Tell the bank or payment provider promptly if payment information or money was involved.
Keep messages, receipts and the names of installed tools for the review. Change exposed account credentials through trusted provider routes.
Check the result.
A trusted review should address account access and the computer, with clear findings and next steps. Ending a session alone does not establish that nothing changed.
Stop and get help if…
The caller installed tools, asked for security changes or accessed business information. Do not treat an unfamiliar scan result or refund promise as verification.