Remote Desktop Screen Share Scam Australia Small Business

Summary

This guide helps you troubleshoot and resolve: Remote Desktop Screen Share Scam Australia Small Business. Follow the steps below to fix the issue.

Common Causes

Technical support scammers are increasingly targeting Australian small businesses by requesting remote access via tools such as TeamViewer or AnyDesk under the guise of fixing account issues or performing system upgrades. Once connected, scammers may install malware, steal credentials, or lock systems and demand payment. This article explains how to identify unsolicited remote access requests, verify legitimate support contact channels, and secure remote desktop software to prevent unauthorised access.

Quick Fix Steps

1. Disconnect your device from the internet immediately.
2. Terminate any active remote desktop session.
3. Uninstall any remote access software you did not install yourself.
4. Run a full antivirus scan.
5. Change passwords for any accounts accessed during the session.

Detailed Instructions

Identifying a Remote Access Scam

Scammers often use urgency and fear to convince you to grant access. Watch for these warning signs:

• Unsolicited phone calls claiming to be from Microsoft, Apple, NBN, or your internet provider.
• Pop-up warnings stating your computer is infected and providing a phone number to call.
• Requests to download screen sharing software such as TeamViewer, AnyDesk, or Chrome Remote Desktop.
• Claims that your IP address has been compromised or your system is sending errors.
• Pressure to act immediately to avoid account suspension or data loss.

Legitimate organisations will never call you out of the blue and ask you to install remote access software.

Verifying Legitimate Support Channels

Before granting anyone access to your device, verify their identity using official contact methods:

1. End the call or close the pop-up immediately.
2. Visit the organisation's official website by typing the address directly into your browser.
3. Use the contact details listed on the official website, not details provided by the caller.
4. If you are unsure whether a support request is legitimate, contact your trusted IT provider or software vendor directly.

Never provide remote access to someone who contacts you unsolicited, regardless of who they claim to represent.

Securing Remote Desktop Software

If you use remote desktop tools for legitimate business purposes, configure them securely:

1. Enable two-factor authentication on your remote access account.
2. Set a strong, unique password for unattended access.
3. Disable unattended access if it is not required.
4. Review the list of permitted devices regularly and remove any you do not recognise.
5. Keep the software updated to the latest version.

Disconnecting an Active Remote Session

If you believe a scammer is currently connected to your device:

1. Unplug the Ethernet cable or turn off Wi-Fi immediately.
2. If you cannot disconnect the network, hold the power button to force the computer to shut down.
3. Restart the device and do not reconnect to the internet until you have completed the security steps below.

Removing Unauthorised Remote Access Software

Check for and remove any remote access tools you did not install:

On Windows

1. Select Start, then select Settings.
2. Select Apps, then select Installed apps.
3. Look for programs such as TeamViewer, AnyDesk, or Chrome Remote Desktop that you did not install.
4. Select the three dots (...) next to the app, then select Uninstall.
5. Follow the prompts to remove the software.

On macOS

1. Open Finder and select Applications from the sidebar.
2. Look for remote access applications such as TeamViewer or AnyDesk.
3. Drag the application to the Trash, or right-click and select Move to Trash.
4. Empty the Trash to complete removal.

Running a Security Scan

1. Open your installed antivirus or security software.
2. Select Full scan or Deep scan.
3. Allow the scan to complete and quarantine or remove any detected threats.
4. Restart your computer after the scan finishes.

Changing Compromised Passwords

If a scammer had access to your device, assume any passwords entered or stored during that time are compromised:

1. Use a different, clean device to change your passwords.
2. Update passwords for email, banking, accounting software, and any business accounts.
3. Enable multi-factor authentication wherever available.
4. Check your email account for any forwarding rules or filters you did not create.

Troubleshooting

Remote Access Software Will Not Uninstall

If the software resists removal:

1. Start Windows in Safe Mode or macOS in Safe Mode.
2. Attempt the uninstall steps again.
3. Use the official removal tool provided by the software vendor if available.

Suspected Malware After Remote Access

If you notice unusual behaviour such as new programs, changed settings, or inaccessible files:

1. Keep the device offline.
2. Back up important files to an external drive that is not connected to the network.
3. Consider restoring the device from a clean backup or performing a factory reset.
4. Contact a trusted IT professional for assistance.

If you are unsure whether a support request is legitimate, it is always safer to decline access and verify through official channels.

If you need assistance securing your systems after a suspected scam, Open a Ticket.

If you host with us, you don't need to do this yourself — just Open a Ticket and our Brisbane team will get it sorted.

Still Having Issues?