What Happens When You Give a Scammer Remote Access?

The quick answer

Remote-control software can let another person view your screen, operate your computer, copy data, or install additional tools, depending on its features and granted permissions. If the person was a scammer, stop the session and treat the computer as untrusted until reviewed.

Disconnect first

If a suspicious person is still connected, disconnect Wi-Fi or Ethernet if you can do so safely. Don't continue negotiating with them. Disconnecting interrupts an active network session, but unattended-access software could remain installed and reconnect later.

Use another trusted device for accounts

1. From a phone or another computer you trust, change the passwords for accounts you used or exposed during the session.
2. Review sign-in history and enable multifactor authentication.
3. Contact your bank or card issuer directly if you paid, opened banking information, or noticed suspicious transactions.
4. Preserve invoices, messages, software names, and times of the incident for any report or investigation.

What might have happened?

The scammer may have opened normal Windows utilities to frighten you, viewed private files, accessed browser sessions, transferred data, or installed software. It isn't possible to know simply from a clean-looking desktop afterward. A quick antivirus scan is useful but cannot prove that no access remains.

How to regain confidence

Have the device assessed by a trustworthy technician. The review should check remote-access tools, new user accounts, startup items, browsers, security settings, and signs of persistence. Depending on the exposure, backing up personal data and reinstalling the operating system may be safer than trying to undo every change.

Don't grant access to the next caller

Scammers sometimes contact victims again pretending to offer a refund or 'security cleanup.' A second unsolicited offer of remote support is not a cure for the first one.

Reference: FTC: What to do if you were scammed.