Handing Over Your Screen Means Handing Over Your Bank Account
The person on the phone sounds helpful. They’ve explained the problem in detail, they’ve walked you through a few steps, and now they say they just need to take a quick look themselves to fix it properly. Could you install a small program so they can connect remotely?
It sounds reasonable. It’s how legitimate tech support sometimes works. And that’s exactly why this particular step is the most dangerous moment in a tech support scam.
Remote access is not a scan or a check. It is full control of your computer. Once a scammer has it, everything visible on your screen — your files, your browser, your banking sessions, your saved passwords — is visible to them too.
What Remote Access Software Actually Is
Remote access software — programs like AnyDesk, TeamViewer, and Quick Assist — were designed for legitimate purposes. IT departments use them to help employees troubleshoot without being in the same room. Family members use them to help each other with tech problems. They’re real tools used every day for real purposes.
What they do is create a live connection between two computers, allowing one user to see and control the other’s screen. When the connection is open, the person who connected to you can move your mouse, open your programs, type on your keyboard, and navigate anywhere on your device as if they were sitting right in front of it.
Under normal circumstances, that’s useful. With a scammer on the other end, it’s exactly as serious as it sounds.
What Scammers Do Once They’re Connected
The scammer will appear to be doing what they described — running a scan, looking for the problem, fixing something. And in the background, they’re doing something else entirely.
Viewing open banking sessions. If you have your bank’s website open in a browser tab, they can see it. They can navigate to your account balances, your recent transactions, your transfer options.
Initiating transfers. In some cases, scammers have transferred funds directly from a victim’s account to their own during the remote session. They may wait until you’re distracted — perhaps answering a question they’ve just asked — to do it.
Collecting saved passwords. Modern browsers offer to save passwords for websites you visit. Scammers can open your browser’s password manager and export those credentials while you’re on the phone.
Installing persistent access. Some remote access tools can be configured to run in the background after the session ends, allowing the scammer to reconnect later without your knowledge.
The session that looked like a helpful tech call can leave consequences that don’t become visible for days.
The Signal That Distinguishes a Scam From Legitimate Support
Here is the clearest way to separate real tech support from a scam, on this specific point:
Legitimate tech support, from a company you contacted yourself, through their official channels, after you initiated the request — may ask for remote access. That’s a reasonable thing in that context.
No legitimate tech support will ask for remote access out of the blue. No real representative from Microsoft, Apple, a bank, or the CRA will call you unsolicited and request control of your computer. That combination — a call you didn’t initiate, from someone you can’t verify, asking for access to your device — does not occur in legitimate support.
The request for remote access, in that context, is the scam. Not a warning sign of a potential scam. The scam itself.
What to Do If This Has Already Happened
If you gave remote access to a caller before reading this, take these steps as soon as possible: disconnect from the internet (unplug your ethernet cable or turn off your Wi-Fi), and contact your bank directly to alert them and monitor for unauthorized transactions. Change your important passwords from a different device — a phone not connected to the same computer — before reconnecting. Consider having a local computer technician look at the device.
None of this is cause for shame. These calls are run by organized operations that do this professionally, all day, every day.
One thing to do: Commit this rule: never install software that a caller asks you to install, no matter who they say they are. If you need tech support and someone suggests remote access, find the company’s official support line yourself and call it back through that verified number. That gap — hanging up and calling back — is enough to end this kind of scam entirely.
Report tech support fraud to the Canadian Anti-Fraud Centre at 1-888-495-8501 or antifraudcentre.ca.