A fake virus warning or remote-access scam: helping your parent respond
Do not call the number in a virus pop-up or grant access to an unexpected caller. If someone already has remote control, end the session and disconnect the affected device from the internet if you can do so safely. Use a different trusted device to contact the bank or obtain genuine support.
Priority draft corrections reviewed October 13, 2026. Earlier source dates below remain applicable; no independent clinician review or hands-on product testing.
AI-assisted educational guide based on the sources linked below. Apply instructions for your specific device, provider and situation; emergency responders’ instructions take priority.
Does a warning mean the computer is infected?
A frightening web page alone is not proof of infection. FTC guidance says real security warnings do not tell you to call a phone number, and scammers may impersonate familiar technology companies or advertise fake support in search results. Find support through the manufacturer’s known website or a provider you already trust. FTC: recognizing tech-support scams.
Do not click buttons inside the warning to “fix” it. If you cannot safely close it, stop using the device and get trusted help. Do not install software suggested by the caller.
What if remote access was already granted?
If a financial account was opened, payment information was disclosed or money was sent, contact the bank/payment provider promptly through its official route using a different trusted device. Do not wait for password review or device repair to finish.
End communication with the caller. Our containment suggestion is to close the remote session and disconnect Wi-Fi or the network cable on the affected device, without disrupting essential medical equipment or other household systems. If unsure, ask trusted technical support to help; do not keep using it for banking while access is unresolved.
Tell the technician the remote-access application used, when the session occurred and whether passwords or financial accounts were opened. Ask them to check for persistent access and unwanted software. A disconnected session does not prove the device is clean.
Which accounts should be checked?
Change exposed passwords and any reused elsewhere, using a trusted device. Set up two-factor authentication where available and confirm you can use the account’s recovery process. If a bank account or payment was involved, call the institution promptly. FTC recommends updated security software and a scan after computer access has been given to a scammer; trusted technical help may be needed. FTC: responding to exposed access.
Ask the account provider about unfamiliar sessions or account changes. Do not give authentication codes to the original caller or to a new person claiming to be their “refund department.”
Follow each affected provider’s official account-recovery checklist. Sign out other sessions where the provider offers that control, remove unfamiliar recovery phone numbers or email addresses, and check for email rules that forward messages to someone else. If you cannot sign in, use the provider’s official recovery process. Keep a record of which accounts still need attention.
Providers have different controls; a changed password alone does not certify the account secure. FTC: account recovery.
How can we arrange legitimate help?
Use this intake note: device type; what appeared; what was clicked or installed; whether control was granted; accounts opened; payments made; and actions already taken. Do not include passwords. Ask the technician for the scope and cost before work begins, how they verify their identity and how remote access will be ended.
If device cleanup requires reinstalling software, ask about preserving needed files and evidence first. This guide does not certify that any scan, application or repair removes every threat.
What can make the next incident easier?
Choose a trusted support route together and keep it near the computer. Agree on a phrase such as “I will check that independently.” Have your parent practice finding that support contact without opening the suspicious message. Make the same rule apply to every family member.
Write down the repair outcome and any remaining account actions, then assign the follow-up. Buying another security subscription is not the first task when money or account access is still at risk.
Continue when you are ready
Sources and method: Source links sit beside the guidance they support. We distinguish official guidance and research findings from our suggested checklists, conversation prompts and planning examples. Those practical tools are not validated clinical assessments. No product purchase is required. Our editorial standards · Report an error or outdated guidance.