You gave a stranger remote access to your computer. Do this next

A support scammer who controlled your screen may have installed software, copied files or seen passwords. Ending a phone call is not enough to know the computer is safe. If banking or work data appeared on screen, treat those accounts as exposed.

Contain the session​

1. Disconnect the computer from the internet to end the live remote session. If necessary, shut it down. Do not follow the caller's instructions to reconnect.
2. From a separate trusted device, change important passwords, starting with email and banking. Review recent sign-ins, recovery methods and payment activity. Contact your bank using the number on your card if money or payment details were involved.
3. On the affected computer, identify and remove the remote-control program, update Windows and your security software, then run a full scan. If you cannot establish what changed, seek reputable in-person help or reinstall from trusted media after protecting your files.

Confirm recovery​

Check that no unfamiliar remote-access app, browser extension or new user account remains. Monitor account activity afterward. The FTC's tech-support scam advice explains what to do after access or payment. A clean antivirus scan is useful evidence, but cannot prove that no data was viewed or copied.

Make a record​

Write down the remote program's name, time of access, any payment and what information was visible. Save receipts and messages before removing the program. This helps a bank, employer or technician assess exposure. Do not send passwords or recovery codes to a person offering to 'undo' the scam.