What to Do After Sharing Your Screen With a Scammer
If you shared your screen with a scammer, end the call and disconnect the session first. Then secure any account, payment detail, password, or verification code that appeared. Do not keep arguing with the caller while they can still see or control the device.
The right response depends on what happened. A view-only share exposes information. Remote-control software may also let the person click, type, open files, or reconnect later. Work through the steps below in order and use a different trusted device when possible.
End sharing and remote access
Change exposed passwords
Check sessions and payments
Contact the real provider
Disconnect before you investigate
Stop screen sharing, leave the meeting, and close the meeting app. If the other person had remote control, disconnect Wi-Fi or unplug Ethernet before doing anything else. This breaks the live connection while you assess the device.
Do not follow instructions to hide the screen, open a bank account, move money, or install another tool. Legitimate support does not need you to conceal a transaction from your bank or family.
- End the call and stop the share.
- Disconnect the computer from the internet if remote control was granted.
- Use another device to change important credentials.
- Save the caller number, meeting link, receipts, and messages as evidence.
Remove remote-access software
Check recently installed apps and browser extensions for remote-support tools you did not already use. Uninstall the tool, remove any unattended-access permission, and restart the computer. Simply closing the visible session may not remove a background service.
Run the built-in security scan on the device. If the scammer installed unknown software, changed security settings, or had administrator access, ask a trusted technician to inspect the computer before you use it for banking or work again.
Secure what they could see
Treat visible passwords, one-time codes, recovery codes, card numbers, account numbers, and API keys as exposed. Change passwords from a clean device, sign out other sessions, rotate keys, and replace any recovery code that appeared.
Start with email because it can reset many other accounts. Then secure banking, payment services, password managers, work accounts, and social accounts. Use a unique password for each and turn on two-factor authentication.
Check payments and report the incident
Contact your bank or card issuer through the number on the card or its official site. Explain that a scammer watched or controlled the device. Ask them to review pending transfers, cards, new payees, and account changes.
Report the account, phone number, payment destination, and remote-access service through the relevant fraud channel. If work or customer data appeared, tell your employer or security contact quickly. Early reporting gives them a chance to revoke access and preserve logs.
Practical examples
Match the response to the exposure
- They only saw your desktop: close the share, review what was visible, and secure any exposed information.
- They watched you log in: change that password, sign out active sessions, and replace any code they saw.
- They controlled the mouse: disconnect the device, remove the remote tool, and inspect the system.
- They watched a payment: contact the bank immediately, even if the transaction still says pending.
Where Safe Screen Share fits
Safe Screen Share is for legitimate calls, demos, recordings, and tutorials where you need the real page visible but not every private detail on it. It runs locally in your browser, detects sensitive fields like emails, phone numbers, payment data, and API keys, and can turn on automatically when a meeting starts.
You can add Safe Screen Share to your browser or see the pricing. It is a one-time purchase, not a subscription.
Related guides
Frequently asked questions
Should I turn off the computer?
If remote control is active and you cannot end it, disconnect the internet or power off the computer. Use another device to contact your bank and change passwords.
Can a scammer come back after the call?
A normal screen share ends with the session. Remote-access software with unattended access may allow a later connection until you remove or disable it.
What should I change first?
Secure your email first, then banking, payment, password manager, and work accounts. Rotate any keys or recovery codes that were visible.