Device & Account Cleanup
Step-by-step guide to securing your devices and accounts after a security incident
Educational service. We do not recover funds. No legal/financial advice.
If a scammer had access to your device, follow these 7 steps within the first hour to secure your accounts and remove threats. This guide covers removing remote access software, ending active sessions, resetting passwords, enabling 2FA, running security scans, protecting against SIM swaps, and revoking suspicious app permissions.
Do These Steps FIRST (Within 1 Hour)
Critical actions to take immediately
- Disconnect from internet - Unplug Ethernet cable or turn off Wi-Fi if remote access is still active
- Remove remote access software - Uninstall TeamViewer, AnyDesk, Chrome Remote Desktop, or any software they asked you to install
- End all active sessions - Log out of all devices on critical accounts (see steps below)
- Change email password from a different device - Use a phone or computer they never accessed
When to Seek Professional Incident Response
Consider hiring a professional cybersecurity firm if:
- You run a business and work devices were compromised
- Sensitive client or customer data may have been accessed
- The scammer had extended access (days or weeks)
- You're unable to fully remove the threat yourself
- Legal or regulatory compliance is involved
Professional incident response can cost $150-500/hour but may be necessary for business or high-value personal situations.
Cleanup Completion Checklist
- ✓Removed all remote access software
- ✓Ended all active sessions on critical accounts
- ✓Changed passwords (email first, then banking, then others)
- ✓Enabled two-factor authentication on all critical accounts
- ✓Ran security scans and removed any threats
- ✓Added PIN to mobile carrier account (if personal info was shared)
- ✓Revoked suspicious third-party app permissions
Related Resources
This is educational guidance only. We are not IT professionals and do not provide technical support services.