Remote desktop safety: how to spot and stop tech-support scams

Remote desktop apps are safe in the hands of people you trust. The same tools are also the favourite trick of tech-support scammers, because one ID and one password give them a stranger’s screen. Knowing how the scam works is most of the protection.

How the scam works

1. The contact. A phone call, a pop-up that won’t close, or an email says your computer has a virus, your bank account is compromised, or a refund is waiting. It claims to come from Microsoft, Apple, your bank or your internet provider.
2. The urgency. You’re told to act now, often while staying on the phone.
3. The install. You’re asked to download a remote desktop app and read out the ID and password.
4. The takeover. Once connected, they “find” problems, ask for payment, open your banking or install their own software.

The one rule that stops it

Never give your ID and password to someone who contacted you first. Only share them with people you know and called yourself. Real companies don’t phone you about viruses, and genuine pop-ups never ask you to install remote access software.

Warning signs

• An unexpected call or pop-up about a virus, refund or account problem.
• Pressure to stay on the phone and act immediately.
• Requests to sign in to your bank while they are connected.
• Payment by gift cards, cryptocurrency or wire transfer.
• Your screen going dark or the other person asking you to look away.

How EnDesk helps

• You approve every session. Unless you turn on unattended access yourself, nobody connects until you click Accept.
• A new password every session. A password you read out once stops working for the next session.
• A clear warning while shared. A red banner shows whenever your screen is being shared, with a Stop sharing button that ends it at once.
• Guessing is slowed down. Repeated wrong passwords are rate limited.

If someone already connected

1. End the session with Stop sharing, or disconnect from the internet by turning off Wi-Fi or unplugging the cable.
2. Close or uninstall the remote desktop app, and check for other remote access apps they may have installed.
3. Call your bank on the number on your card if they saw any banking or payment details.
4. Change your passwords from a different, trusted device, starting with email and banking. Turn on two-step verification.
5. Scan the computer with your security software, or have someone you trust check it.
6. Report it to your local police or consumer protection agency.

Helping family stay safe

If you look after a relative’s computer, set up remote help in advance so they never need to install anything when a stranger asks. Agree on a simple rule: you are the only person who ever gets a password, and you’ll always call them, not the other way round.