Security Alert
“Can I Connect to Your Computer?” How Remote Access Scams Work and How to Shut Them Down
The phone rings. A calm, professional voice says they’re from Microsoft, your bank, or your internet provider. Your computer has a virus, your account has been hacked, or you’re owed a refund. To fix it, they just need to connect to your computer for a few minutes.
That one request, “let me connect remotely”, is the heart of one of the most common and costly scams targeting Canadians today. It hits seniors, families, and small businesses alike. The good news: once you know how it works, it’s one of the easiest scams to stop.
Caller: “Hello, this is the Windows security department. We’ve detected dangerous activity coming from your computer.”
You: “Oh no, what do I do?”
Caller: “Don’t worry, I’ll fix it for you. Please go to this website and enter the code I give you so I can see your screen.”
Caller: “Now, to process your security refund, please log in to your online banking…”
What is a remote access scam?
Remote access software (like AnyDesk, TeamViewer, ConnectWise, or Windows Quick Assist) is a legitimate tool. IT professionals use it every day to fix computers without driving to your home or office. Scammers abuse these same tools. Once you install the software and give them the code, they can see and control everything on your computer: your email, saved passwords, files, and your online banking.
These scams usually arrive one of three ways:
The “tech support” call
Someone claiming to be Microsoft, Apple, your bank, or your internet provider calls you out of the blue about a “problem” with your computer or account.
The fake warning screen
A loud, flashing browser alert says your computer is infected and locked, and tells you to call a “support” number immediately.
The fake invoice or refund
An email or text claims you were charged for a subscription or are owed a refund. Call the number “to cancel” and they’ll ask to connect to your computer.
How the scam unfolds, step by step
-
Create panic. They claim your computer is infected, your bank account is compromised, or your identity is being stolen. Fear makes people act before they think.
-
Build trust. They use official-sounding names, employee ID numbers, and technical jargon. Some even spoof caller ID so it shows a real company’s name.
-
Get remote access. They walk you through downloading remote software and reading them a code. Now they control your screen.
-
Fake the “proof.” They open system logs or run commands that look scary but are completely normal, to “prove” there’s a problem.
-
Take the money. They charge you for fake repairs, or run a “refund” trick, editing your banking page so it looks like they sent you too much, then pressuring you to send the difference back via wire transfer, gift cards, or crypto.
-
Leave a back door. Before hanging up, many install hidden software so they can return later, steal passwords, or lock your files.
Red flags: hang up if you hear any of these
- You get an unexpected call about a problem with your computer. Microsoft, Apple, and Google do not make these calls.
- They ask you to install software or visit a website and enter a code.
- They want you to log in to online banking while they’re connected.
- They ask for payment by gift card, wire transfer, cryptocurrency, or Bitcoin ATM.
- They say you were “accidentally refunded too much” and need to send money back.
- They pressure you to act right now and to stay on the line.
- They tell you not to tell anyone, not even your bank, family, or IT provider.
- A pop-up says your computer is “locked” and gives a phone number to call.
The golden rule: Never give remote access to anyone who contacted you first.
Legitimate companies don’t call you to fix your computer. If you didn’t reach out to them, it’s a scam.
Best practices to protect yourself
- Hang up and call back on a number you trust. Use the number on your bank card, a statement, or the company’s official website, never the number the caller or pop-up gives you.
- Only allow remote access to people you already know and chose. Your own IT provider, on a session you requested, is fine. A stranger who called you is not.
- Close fake pop-ups instead of calling them. Press Ctrl + Alt + Delete (Windows) or Cmd + Option + Esc (Mac) to close the browser. Restarting the computer works too.
- Never log in to banking while someone else is connected. No real support agent needs to see your bank account.
- Treat gift cards and crypto as a scam signal. No legitimate business or government agency asks for payment this way.
- Turn on multi-factor authentication (MFA) for email, banking, and social media, and never read those codes to anyone over the phone.
- Use a password manager so every account has a unique, strong password.
- Keep Windows, macOS, browsers, and antivirus updated automatically.
- Check emails carefully. Look at the actual sender address, hover over links before clicking, and be suspicious of urgent invoices or refunds you don’t recognize.
- Talk to your family. Share this article with parents and grandparents, since scammers often target older adults.
Already gave someone access? Act fast.
Don’t be embarrassed. These scammers are professionals, and it happens to smart, careful people every day. What matters is acting quickly:
- Disconnect from the internet right away (unplug the cable or turn off Wi-Fi).
- Call your bank and credit card companies using the number on your card. Ask them to watch for fraud and reverse any transactions.
- Change your passwords, starting with email and banking, from a different, trusted device.
- Uninstall the remote access software and have your computer professionally checked for hidden back doors.
- Report it to the Canadian Anti-Fraud Centre at 1-888-495-8501 or online, and to your local police.
- Watch your credit and consider placing a fraud alert with Equifax and TransUnion.
For businesses: protect your team
Business owners and staff are targeted too, often with fake “IT department” calls or emails. A single employee granting access can expose customer data, accounting systems, and email.
- Set a clear policy: staff only accept remote sessions from your approved IT provider, through an approved tool.
- Block unapproved remote access software from being installed on work computers.
- Train your team to recognize phishing emails and scam calls, and make it safe to report mistakes quickly.
- Require MFA on email and business accounts, and verify any payment change requests by phone.
- Have backups and monitoring in place so a single click can’t take the business down.
Not sure if it was a scam? Ask us first.
Razenet is a family-owned IT company right here in Red Deer. If you get a suspicious call, email, or pop-up, give us a call before you do anything. We’ll also clean up and secure a computer that’s been compromised, and help businesses protect their teams with managed IT services.
