This is known as remote access takeover, or computer access takeover. If this happens, the criminals will be able to access all your files and see what you’re typing. They might even be able to turn on your webcam or microphone to spy on you.
With this type of scam, someone might call you unexpectedly, claiming to be your bank, an internet or utility company – or even the police.
They’ll try to convince you to give them remote access to your computer. They might say they can help with something like a slow internet connection or fix a virus. The fraudsters might also ask you to download software, visit a specific website or follow instructions which give them control.
The scammers might offer a refund for your inconvenience. They’ll then try to persuade you to log on to online banking to check you've received the money. The scammer will still have remote access, meaning they can see everything you’re typing – including your online banking log on details.
They might also ask you for a code sent by the bank (from your Secure Key for HSBC customers) so they can ‘process the refund’. Handing this information over gives them everything they need to move money from your account.
In some cases, the scammers might move money between your accounts so it looks like they’ve sent too much. They’ll then convince you to send it back to them. In reality it will be your own money you’re ‘returning’ to them.
We'll never ask you to do any of this - and neither will the police or internet and utility companies.
Explore: How to log on with HSBC
Here are some steps you can take to help make sure your money is secure:
Read our page on the latest scams for more on how you can help protect yourself from fraud.
If you've given remote access to someone in this way, you should take these steps.
For laptops and desktop computers:
For mobile phones:
This is the only way to stop them being able to connect so you can regain full control. A remote access connection will work over any available internet connection, so simply restarting or rebooting won't be enough to block fraudsters.
Once you're back in control, you must delete any remote access software that you’ve installed.
Explore: How to bank safely online