Skip to content
    HackFirstAid.com

    Tech support scam: what to do after letting them in

    A pop-up or caller claiming to be Microsoft, Apple or your bank got onto your computer. Disconnect it from the internet, call your bank, remove the remote-access software and change passwords from a different device.

    Do right now

    · Within minutes
    1. If you sent a wire or e-Transfer in the last few hours, call the bank's fraud line now and ask them to attempt recall — Interac e-Transfers can sometimes be cancelled if not yet deposited.

    2. If you paid by credit card, call the number on the back and request a chargeback under 'fraudulent transaction'; cancel and reissue the card.

    3. If you bought gift cards (iTunes/Apple, Google Play, Amazon, Steam, Target), call that issuer's fraud line and read the card numbers — sometimes balances can be frozen if not yet redeemed. Don't throw the cards out.

    4. If you gave anyone remote access (TeamViewer, AnyDesk, LogMeIn, GoToAssist, UltraViewer): disconnect the computer from the internet, but do NOT shut it down or sign into anything else from it.

    Do today

    · Within hours
    1. From a different device, change passwords for every account you logged into on that computer in the last 90 days — email first, then bank, then cloud storage, then everything else.

    2. Hunt for things the attacker set up while connected: a second user account, mail-forwarding rules, new devices added to iCloud/Google, new 2FA methods on accounts, pending bank transfers.

    3. Tell your bank, cards, and every money provider in writing that you experienced a tech-support scam — many have specific refund processes when asked by name.

    Do this week

    · Within days
    1. Wipe and reinstall the operating system using Microsoft or Apple's official path — don't restore from a recent backup, set up clean and copy specific files over after scanning.

    2. If gift-card receipts and unused balances exist, save them — some retailers refund documented scam losses more often than people realize.

    3. 🇺🇸 US

      Report it.

    4. 🇨🇦 CA

      Report it.

    Ongoing protection

    · Build the habit
    1. No legitimate company — Microsoft, Apple, Google, Amazon, your bank, the CRA or IRS — will call you out of the blue, take remote control of your computer, or ask for gift-card payment.

    2. Watch out for 'recovery scammers' who call after the first scam claiming they can get your money back for an upfront fee — that's the same crew or a partner. Real refunds never charge upfront.

    Is this happening at work?

    If a business account, company device or customer data is involved, the steps change. Get help built for organizations.