Already gave out a code, or let someone into your computer? Do this now.

Why speed matters

A shared one-time code or an active remote access session can be used within minutes, not hours. Nothing about feeling embarrassed or unsure whether anything actually happened should slow down the steps below. It costs nothing to act and confirm nothing is wrong. It costs a great deal to wait.

Immediate steps

1. If remote access software is still open on the computer, close it and disconnect from the internet, either by turning off Wi-Fi or unplugging the cable.
2. Update the computer's security software so it has the latest protections, then run a full scan and remove anything it flags as a problem.
3. Call the bank directly, using the number on the back of a card or a recent statement, and explain exactly what happened, including any code shared or transfer made.
4. Change passwords on any account that was touched, or that shares a password with one that was, starting with email since it is often the way back into everything else. Turn on two-factor authentication wherever it is not already on.
5. Report the scam at ReportFraud.ftc.gov, and if personal information such as a Social Security number or ID was shared, file a report at IdentityTheft.gov for a specific recovery plan.
6. Watch bank and card statements closely for the next few weeks, not just the next few days.

Things to watch

• New logins, password reset emails, or account alerts that were not requested.
• Unfamiliar transactions, even very small ones, which are sometimes used to test whether a card still works.
• Any follow-up call from someone offering to help "recover" the money or the account. This is frequently a second scam targeting people who already lost money once, often posing as a recovery service, a lawyer, or even the same agency mentioned the first time.

There is no reason to feel foolish about any of this. These calls are built by people who do this constantly, using pressure and detail designed specifically to work on someone paying full attention. Acting quickly now matters far more than how the call started.