Act in this order: disconnect the computer from the internet, call your bank or card company using the number on your card, change important passwords from a different device, remove any remote-access software the scammer installed, run a security scan, then report the scam. If you shared your Social Security number, go to IdentityTheft.gov for a recovery plan.
Expect follow-up calls. Scammers often call back pretending to offer a refund or to “recover” your money for a fee. Legitimate agencies and companies will not ask you to pay to get your money back.
First, stop the bleeding
If the scammer is still connected or on the phone, hang up. Then disconnect the computer from the internet: turn off Wi-Fi or unplug the network cable. That cuts off any remote-access session. You do not need to unplug the computer from power or wipe it yet.
Feeling embarrassed is normal, and it is not a reason to wait. These scams are run by organized groups who use convincing scripts. Acting quickly gives you the best chance of stopping payments and protecting your accounts.
Contact the company you paid
The FTC advises asking the company you used to pay whether the payment can be reversed:
- Credit card or debit card: call the number on the back of the card and report the charge as fraud.
- Bank transfer or Zelle: contact your bank or credit union immediately and ask them to reverse the payment.
- Payment app (Venmo, Cash App, PayPal): report it in the app or to the company right away.
- Gift cards: contact the card issuer using the number on the card, tell them it was a scam, and keep the card and receipt.
- Wire transfer or cryptocurrency: contact the wire company, exchange or ATM operator immediately and ask for a reversal.
If the scammer showed you your bank account while connected, assume they saw your account details and tell the bank that too.
Secure your accounts from a clean device
Use a phone or another computer you trust, not the one the scammer accessed, to change passwords. Start with your email account, because it controls password resets for everything else, then banking, then any account you logged in to during the call.
- Use a new, unique password for each account. A password manager makes this practical.
- Turn on two-step verification wherever it is offered.
- In your email settings, check for forwarding rules or recovery addresses you did not add.
- Review recent sign-in activity and sign out other sessions.
Clean up the computer
Scammers commonly install legitimate remote-access tools so they can reconnect later. On Windows, open Settings > Apps > Installed apps and sort by install date. Uninstall remote-access or “support” programs you did not install yourself before the scam. If you are unsure what a program is, search its name on a different device before removing it.
Next, run a full scan. The FTC recommends updating your security software and deleting anything it flags. In Windows Security, choose Virus & threat protection > Scan options > Microsoft Defender Offline scan. Our antivirus guide covers second-opinion scanners. If problems persist, a reset of Windows after backing up your files gives you a clean start; restore documents only, not programs.
If you need hands-on help, go to someone you already know and trust, the computer’s manufacturer, or the store where you bought it. Never call a number from a pop-up or search ad.
Protect your identity
If you shared your Social Security number, date of birth or bank details:
- Visit IdentityTheft.gov. If the information was used, report it there and get a personalized recovery plan. If you are not sure it was used, follow the steps at IdentityTheft.gov/databreach.
- Place a credit freeze with each of the three nationwide credit bureaus (Equifax, Experian and TransUnion). Freezes are free and stop new credit being opened in your name until you lift them.
- Check your free credit reports at AnnualCreditReport.com for accounts you do not recognize.
- Watch bank and card statements closely for the next few months.
Identity monitoring services can alert you to new activity, but the freeze itself costs nothing and gives the strongest protection against new accounts.
Report it and warn others
- Report to the FTC at ReportFraud.ftc.gov. Reports help build cases against scammers.
- Report to the FBI’s Internet Crime Complaint Center at ic3.gov, especially if you lost money.
- If the scammer impersonated Microsoft, you can also report it at microsoft.com/reportascam.
- Tell family and friends what happened. Talking about it is one of the best ways to stop the same group from reaching someone else.
Avoid the second scam
After a scam, victims often receive calls or emails offering to recover lost money, sometimes from people claiming to be government agents, lawyers or the original company’s “refund department.” The FTC warns that someone who works for the government will never tell you to move money to protect it or demand payment. Hang up, and contact organizations only through numbers you look up yourself.
Bookmark our guide to recognizing tech support scams and the real signs of malware so you can spot the next attempt.
Common questions
Can I get my money back after a tech support scam?
Sometimes. Card payments have the strongest protections. Contact the payment company immediately and ask for a reversal; the sooner you act, the better the chances.
Do I need to throw away my computer?
No. Remove remote-access software, run a full scan and change your passwords. A Windows reset after backing up your files is the thorough option.
Should I pay a company that promises to recover my money?
No. Fund-recovery offers after a scam are frequently a second scam.
Sources and further help
Official and primary sources used to check this guide. Menus, prices and plan details can change; confirm current terms with the provider.