Decide how bad it is
Three rough levels:
- Pop-up only — you closed it: low risk. Steps 1–3.
- You called the number but did not install anything or pay: medium risk. Steps 1–4.
- You installed remote-access software, paid, or read out card / banking details: high risk. Every step plus your bank's fraud line.
Step 1: Disconnect and clear the browser
If you let anyone remote in, unplug the network cable or turn off Wi-Fi now. Reconnect later only when steps 2 and 3 are complete.
Close all browser windows via Task Manager, then clear your browsing history, cookies and cache from the last hour.
Step 2: Uninstall any remote-access tools
Go to Settings → Apps → Installed apps and uninstall: AnyDesk, TeamViewer, Quick Assist, UltraViewer, Splashtop, ScreenConnect / ConnectWise Control, LogMeIn, Supremo, plus anything else installed in the last 24 hours that you do not recognise.
Reboot the PC.
Good to know
Quick Assist is built into Windows and cannot be uninstalled, but it cannot connect again unless you actively share a code. Just make sure no session is currently active.
Step 3: Run a full Malwarebytes + Defender scan
Follow the Malwarebytes guide linked below to install it (free) and run a Threat Scan, then run a Microsoft Defender offline scan from Windows Security → Virus & threat protection → Scan options.
Quarantine and delete everything either tool flags.
Step 4: Change your important passwords from another device
From a phone or different computer, change your email, banking, Microsoft account and password manager master passwords. Enable two-factor authentication on each.
Sign out of all other sessions where the platform offers that option (most do under Security).
Step 5: If money or card details were involved
Call your bank's fraud line and request new card numbers. Watch your statements for the next 30 days.
If you sent gift cards or wire transfers, report it to your local cybercrime authority — in Australia that's ReportCyber (cyber.gov.au/report).
Important
Scammers often re-target victims weeks later pretending to be 'recovery agents' who can get your money back for a fee. Ignore them.
Tags:
Phishing & Scams
Was this guide helpful?
Know someone who needs this? Send them the guide.
JD
Written by
Jordan DicksonFounder, CyberSecurityGuides
Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.
Reviewed by CSG Security Engineers