What to do if you let someone into your device
It's not your fault. These scammers pose as tech support, your bank, or a big company, and they sound real. Cutting them off and protecting your money come first. You can fix the device after.
Do these steps in order
0 of 5 done
-
Do this now Turn off the device, or disconnect it from the internet
Hang up on them first. On a computer, shut it down. This cuts off their connection. On a phone, stop any screen sharing. Don't use the device for banking until it's checked.
-
Do this now Call your bank now, from a different phone if you can
Use the number on the back of your card. Tell them someone had control of your device. Ask them to check for transfers you didn't make. If you paid the scammer with a card, ask to dispute the charge.
What to say: “Someone had remote access to my device. Please check my accounts for transfers I didn't make and help me protect them.”
-
Change your email and bank passwords today, from another device
If someone you know or live with may have set this up, removing it or signing them out can alert them. If you’re worried about your safety, talk to a domestic violence advocate before you change anything. The National Domestic Violence Hotline is free and open any time: call 800-799-7233 or chat at thehotline.org. If you can, use a phone or computer they can’t check.
Use a phone or computer the scammer never touched. Start with your email, since it can reset your other accounts. Then turn on two-step sign-in. If you used those passwords anywhere else, change them there too.
-
Remove any app they had you install
Look for remote-control apps like AnyDesk or TeamViewer, and uninstall them. Not sure how, or worried they left something behind? Ask someone you trust, a local repair shop you know, or the device maker's official support. Never use anyone who called you or came from an ad.
-
Update the device and run a security scan
Install all updates in Settings (on a Mac, System Settings). On Windows, open Windows Security and run a full scan. Delete anything the scan flags. Still worried? A technician can help you reset the device.
Follow up later
- Tomorrow: call back and ask for your case or claim number. Write it down.
- In 30 days: look at your bank and card statements for anything you don’t know.
Keep your place
To keep your place, bookmark this page or copy your private link.
Keep the link private. It shows the steps you’ve ticked. Never send it to anyone who calls, texts, or emails you. Latchstring will never ask for it. Your browser’s history also keeps this address, and may copy it to your Google or Apple account if you sync. On a shared phone or computer, use a private window, or clear your history afterward.
Did any of these happen too?
- I sent money by bank, Zelle, wire, Western Union, or MoneyGram
- I paid with an app like Venmo, Cash App, or PayPal
- I paid with a credit or debit card
- I paid with gift cards
- I sent crypto or used a Bitcoin ATM
- I gave cash, gold, or my cards to someone
- I deposited a check and sent money back
- I shared a code or password
- My phone suddenly has no service
- My email or social media account was hacked
- Someone is using my name, or I gave out my Social Security number
Then, report it and get free help
- Report the scam at ReportFraud.ftc.gov (Federal Trade Commission).
- Also report it to the FBI at IC3.gov, even if it started with a phone call or a visit.
- Get a free recovery plan from a real person: call or text 888-400-5530 (Identity Theft Resource Center, a nonprofit).
- Age 60 or older? Call the Justice Department’s National Elder Fraud Hotline at 833-372-8311 for free help reporting it. Mon–Fri, 10 am–6 pm Eastern.
- Feeling overwhelmed? Call or text 988, any time.
Watch for a second scam. Anyone who contacts you offering to get your money back for a fee, a code, your bank details, or access to your phone or computer is a scammer, even if they say they’re the FBI, the FTC, a lawyer, or us. Don’t search online for a company’s phone number either. Scammers post fake ones.
This guide was last checked in October 2026. Sources: