I let someone take control of my device: what to do
In short
If you paid or gave out a card, call your bank first to block it. Then disconnect the device from the internet and uninstall any remote-control tool installed at your caller's request. From another, clean device, sign out your accounts' sessions and change the passwords, starting with your email and your bank. Finally, have the device checked.
Why this works
While they had control, the person had access to everything accessible in that session: files, email, passwords saved in the browser, open sessions. Two things follow. First, the device is no longer a safe base: passwords are changed from another device. Second, uninstalling the program isn't enough to establish that the machine is clean, and software that works normally proves nothing: that is an argument for discretion, not proof of harmlessness. On a device holding important data, reinstalling the system is the only reset you can vouch for.
Step by step
If money is involved, your bank comes first
If you paid, or gave out a card or a code during the exchange, contact your bank to dispute the transaction and block it: the sooner you act, the more effective it is. Call the number on the back of your card, never the one your caller gave you.
Cut off the access
Disconnect the device from the internet. Then uninstall any remote-control tool installed at your caller's request, and any program they had you install.
Change your passwords from another device
Treat any credentials entered or saved on this machine as exposed. From another, clean device, sign out your accounts' open sessions, then change the passwords, starting with your email, which is used to reset your other accounts, and your bank.
Have the device checked, or reset it
Have the machine scanned, knowing what the check is worth: it finds what didn't try to hide, and a lack of detection proves nothing. On a device holding important data, reinstalling the system is the only reset you can vouch for. Don't then restore a backup made before the suspicion arose without having it examined, or you risk reinstalling what you just removed.
Report it
Report the incident to Cybermalveillance.gouv.fr (in France). On a work computer, notify IT before doing anything.
The most common mistakes
- Calling back the number shown by the alert, or the one the “technician” gave you.
- Changing your passwords from the device that was taken over.
- Settling for uninstalling the program: that doesn't prove the machine is clean.
- Feeling reassured because the computer, or the installed software, works normally.
- Restoring a backup made before the suspicion arose without having it examined: it can bring back what you just removed.
- Deleting everything right away when it's someone close to you who is watching the device: acting on it is visible to them. Read the stalkerware entry first.
See whether you recognize these signs
A fictional message, to practice deciding without risk: A full-screen alert announces an infection and displays a support number.
Simulation: Fake tech supportA tool to do it
- “I clicked” assistant: what to do after a scam link, text or call?Two questions — what you did, how it reached you — and the plan of steps to take, in order of urgency. To print or send to someone close. Nothing is stored.
- Emergency checklist: you've just been scammedThe first steps, in order, depending on what you gave away: money, bank details, a password, access to a device or an account.
- Checklist for an older relativeFake bank advisor, fake tech support, fake prize, premium-rate text: the reflexes that protect, on one page to print and give to a relative.
The attacks this defeats
Official sources
Other guides · Last updated: 2026-10-12.