Remote Access Scam UK: How Scammers Trick You Into Giving Control of Your Computer
Scammers are using fake tech support and security warnings to gain remote access to your computer — here's how to spot and stop them.
What is this scam?
A remote access scam is when a criminal tricks you into downloading software that gives them control of your computer or mobile device. Once installed, they can see everything on your screen, access your files, use your webcam, and most importantly, log into your bank accounts and steal money. The scammer typically claims to be from technical support, your bank, Microsoft, or an antivirus company. They might say your device has a virus, that your account has suspicious activity, or that you need to update security software. In reality, there is no problem — they are simply trying to gain entry to steal your personal and financial information. This is one of the fastest-growing scams in the UK, with victims losing thousands of pounds in minutes because the criminal has real-time access to everything they do.
Warning signs to look for
- You receive an unexpected phone call, pop-up message, or email claiming there is a problem with your device or account that requires immediate action.
- Someone asks you to download or run remote access software like TeamViewer, AnyDesk, Chrome Remote Desktop, or similar programs you don't recognise.
- A 'technical support' person asks you to press specific keys to 'open a safe mode' or 'show them the problem' — legitimate support will never need this level of access.
- Pop-up warnings appear on your screen claiming your device is infected, locked, or that your bank account is compromised — these are fake scare tactics designed to panic you.
- The person requests you to stay on the call while they work on your computer, or asks you to leave your device unattended while they access it.
- You are asked to provide passwords, PIN codes, or security codes (like those from your banking app) so they can 'verify' your identity.
- The caller speaks with pressure and urgency, saying the problem is extremely serious and must be fixed immediately.
- After the call ends, you notice money missing from your bank account, unauthorised transactions, or changes to your passwords and security settings.
How this scam works step by step
Step one: You receive contact — usually a cold call claiming to be from Microsoft Support, your bank, or a security company. Alternatively, a pop-up appears on your device saying your computer is infected or locked. Step two: The scammer creates urgency and fear, telling you that hackers have accessed your account or your device is at risk. They convince you that you need to act immediately. Step three: They ask you to download remote access software, often by visiting a website they provide or by reading out a download link. Popular tools include TeamViewer, AnyDesk, or Chrome Remote Desktop. They guide you through the installation step by step. Step four: Once installed, they request your permission to access your device (this often appears as a pop-up asking to confirm the remote session). Step five: The scammer now has full control of your screen and keyboard. They log into your online banking, navigate to your accounts, and transfer money out. They may also take screenshots of passwords, security details, or personal information. Step six: The session ends, and you only discover the fraud when you check your bank account and find money missing. By then, the criminals have disappeared with your funds.
How to verify if it is genuine
If someone contacts you claiming there is a problem with your device or account, do not take their word for it. Hang up immediately — legitimate companies will never cold-call you asking you to download software or grant remote access. Instead, independently verify the claim by contacting the organisation directly using the phone number or website you know is genuine. For example, if someone claims to be from your bank, hang up and ring your bank's official number on the back of your card. If they claim to be from Microsoft, go to microsoft.com directly (do not use any link they provide) and check if there is a real alert. Check whether you actually have banking alerts or security warnings by logging into your genuine accounts directly — not through links provided by the caller. Read our guide on checking whether a website is a scam for more detailed verification tips. Never download or install software based on a cold call or pop-up warning. If you are genuinely concerned about your device security, contact your computer manufacturer's official support line.
What to do if you have already interacted
If you have already given someone remote access to your device, act immediately. Step one: Disconnect your device from the internet completely by unplugging the ethernet cable or turning off WiFi. This stops the scammer from accessing anything further. Step two: If money has been taken from your bank account, contact your bank immediately using the phone number on the back of your card. Report the fraud right away — your bank may be able to reverse the transaction if you act quickly. Step three: Change all your important passwords (email, banking, social media) using a different device that you know is safe, or use a public computer. Do this on a device the scammer did not access. Step four: Check your bank account and credit reports for any other unauthorised activity. Step five: Run a full antivirus and malware scan on the affected device using reputable software like Malwarebytes or Windows Defender, though note that sophisticated remote access tools may not be detected. Consider having a professional check the device, or wiping it completely if you are worried. Step six: Report the scam to Action Fraud and the NCSC as detailed below.
Reporting this scam in the UK
Report any remote access scam attempt to Action Fraud by calling 0300 123 2040 or visiting actionfraud.police.uk online. Have details ready: the phone number or email address of the person who contacted you, what they claimed, whether they accessed your device, and any money lost. If you received a suspicious email asking you to download remote access software, forward it to the National Cyber Security Centre (NCSC) at report@phishing.gov.uk — they track these threats and may be able to shut down the operation. If the contact came by text message or SMS, forward it to 7726 (the free scam reporting number for mobile phones). If your bank account was accessed or money was stolen, your bank will also file a report with fraud specialists. Report the scam to Citizens Advice consumer helpline on 0808 223 1133 if you need additional support or advice about recovering money. The more people who report these scams, the faster authorities can act to shut down the criminals' operations and protect other UK residents.
Frequently asked questions
Is remote access software like TeamViewer always a scam?
No. TeamViewer, AnyDesk, and Chrome Remote Desktop are legitimate tools used by genuine IT support professionals and companies. The scam is not the software itself — it is how the criminal tricks you into installing it without your knowledge or consent, and then uses it to steal from you. If a real technician needs remote access, your company or bank will contact you officially using known contact details, and you will have requested help first.
What should I do if the scammer already transferred money from my bank account?
Contact your bank immediately using the number on the back of your card — do not use any number the scammer gave you. Report the fraud and request they freeze the transaction and reverse it if possible. Banks can sometimes recover money within 24 hours if you act quickly. Report it to Action Fraud on 0300 123 2040 and ask about compensation schemes like Authorised Push Payment (APP) fraud protection, which may recover your money depending on your bank's policies.
Can scammers install malware through remote access software, or do they only steal money while connected?
Both. While connected, they can steal banking credentials and passwords, and transfer money in real-time. They can also install hidden malware, spyware, or ransomware on your device that runs after the remote session ends. This means they may continue accessing your data or lock your files even after you disconnect. This is why it is critical to disconnect your device immediately and have it professionally checked or wiped if you suspect malware was installed.
How do I report a remote access scam if I received a phone call?
Report the phone call to Action Fraud by calling 0300 123 2040 or visiting actionfraud.police.uk. If the scammer sent you any emails or text messages asking you to download software, forward them to report@phishing.gov.uk (NCSC) or 7726 (for SMS). Provide the phone number they called from, the time and date, what they said, and whether they successfully accessed your device. If your bank account was affected, contact your bank directly and they will file a report with their fraud team.