When Investment “Support” Becomes Remote Access

An investment caller offers to fix an account problem. They ask you to install a remote-support application, share a session code, or show them your screen. The request sounds practical: a few minutes of help, then you can carry on.

That is the point to pause. You are being asked to grant access to a device that may also hold your email, payment records and financial accounts. Decide who is requesting that access before deciding whether the software looks familiar.

The UK's Financial Conduct Authority warns that investment and banking scammers can misuse legitimate screen-sharing software. A recognisable application does not establish the identity or authority of the person using it. The FBI also describes criminals impersonating support staff for financial institutions and cryptocurrency exchanges.

Source: https://www.fca.org.uk/consumers/screen-sharing-scams Source: https://www.fbi.gov/how-we-can-help-you/common-frauds-and-scams/tech-support-scams

Read the permission, not just the explanation

Screen viewing and remote control are different capabilities. Depending on the application and permissions, a session may allow someone to see displayed information, operate the device or transfer files. Some products also support unattended access, which requires separate attention when reviewing what was enabled.

AnyDesk's own guidance tells users to verify support contacts and scrutinise access requests. The software is a legitimate tool; an unsolicited caller's use of it deserves independent checks.

Do not open a financial account while an unverified person is watching or controlling the device. A displayed balance, account identifier or personal document may give them information for a second impersonation attempt. Never disclose a one-time code, password, wallet seed phrase or private key to somebody presenting themselves as investment support.

Source: https://support.anydesk.com/docs/abuse-management Source: https://support.microsoft.com/en-us/security/protect-yourself-from-phishing

Verify through a separate route

End the call and reach the organisation through a channel you chose independently: its official app, an established bookmark or contact details checked against the relevant regulator's register. Do not let the caller supply the evidence that supposedly verifies the caller.

For a UK financial-services offer, check the FCA Firm Checker and the permissions for the service being offered. A matching name alone is insufficient; clone operations can borrow genuine firms' details. Elsewhere, use the appropriate local regulator. Legitimate remote-support needs should be assessed through the organisation's independently verified support process.

If access has already been granted

End the remote session. Contact the affected bank or exchange promptly through its official channels and explain what was visible, what access was allowed and whether any payment occurred. Have the device assessed before relying on it for sensitive logins. Microsoft's guidance recommends removing applications installed at a scammer's direction, checking for malware and changing affected passwords.

Preserve the sequence of events: caller details, messages, the application used, session identifiers or available logs, payment receipts and transaction references. Save original records securely. Do not continue communicating with the suspected operator merely to gather more material.

Source: https://support.microsoft.com/en-au/office/protect-yourself-from-tech-support-scams Source: https://www.fbi.gov/contact-us/field-offices/boston/news/press-releases/fbi-warns-public-to-beware-of-tech-support-scammers-targeting-financial-accounts-using-remote-desktop-software

Bring the records to a case review

If an investment platform or a supposed support representative has caused you financial loss, visit https://assetscollector.com/ and fill in the contact form on our website: https://assetscollector.com/contact-us/#ac-plain . Include a clear timeline and the payment records you already have. Recovery outcomes depend on the evidence and circumstances; no outcome is guaranteed.

Only contact Assets Collector through assetscollector.com. Beware of scammers claiming to work with us, especially through Facebook comments and private messages. Never send a seed phrase, private key or account password.