Scam Recovery · Cyber Safety

I Think I've Been Scammed — What to Do Right Now

If you’re reading this because something feels wrong — a call you shouldn’t have taken, a link you shouldn’t have clicked, a “technician” who asked for remote access to your computer — stop and take a breath. You’re not the first person this has happened to, and most of the damage is still fixable if you act in the next few minutes, not the next few days.

Here’s exactly what to do, in order.

Step 1: Cut the connection

If you gave someone remote access to your computer (through AnyDesk, TeamViewer, or a similar tool), or you’re worried your device is still compromised:

  • Turn off Wi-Fi or unplug the ethernet cable immediately. This stops anyone still connected from doing more damage.
  • Don't turn the computer off yet if you can help it — just disconnect it from the internet. A tech may need to see what's still running.
  • If it's a phone, switch on Airplane Mode.

Step 2: Protect your money before anything else

This is the part that actually matters most. Information can be secured later — money moves fast.

  • Call your bank immediately using the number on the back of your card (never a number the scammer gave you). Ask them to freeze the account and flag the transaction.
  • If you shared card details, ask for the card to be cancelled and reissued.
  • If you made a bank transfer, ask specifically about a recall request — banks can sometimes stop or reverse a transfer if you act within hours.
  • If you paid with gift cards or crypto, report it immediately — recovery odds are lower, but reporting fast still helps.

Step 3: Change your passwords — from a different device

Don’t log in from the computer you suspect is compromised. Use your phone (on mobile data, not the same Wi-Fi) or a different computer entirely. Change, in this order:

01

Your email account

This is the master key to everything else.

02

Online banking

Then work through any other account that holds money or payment details.

03

Any account that shares the same password

Reused passwords are exactly what scammers rely on to spread from one account to the next.

Turn on two-factor authentication while you’re there if it isn’t already on.

Step 4: Report it

Reporting doesn’t just help you — it helps flag the scam before it reaches your neighbours, family, or colleagues.

Step 5: Get your device properly checked

Even if you’ve disconnected the internet and changed your passwords, don’t assume the device is clean. Remote access scams and malware often leave something behind — a keylogger, a scheduled task, remote access software reinstalled under a different name.

This is the step people skip, and it’s the one that causes the second scam a few weeks later.

A proper check means someone actually looking at what’s installed, what’s running on startup, and what connections the device has made — not just running one antivirus scan and hoping for the best.

The scams we're seeing most right now

If any of these sound familiar, you’re not alone — these are the patterns currently doing the rounds across Melbourne:

  • “Your computer has a virus” pop-ups or calls claiming to be from Microsoft, Telstra, or your bank, asking you to install remote access software
  • Invoice or payment redirect scams, especially targeting small businesses — a “supplier” emails asking you to update bank details
  • Romance and relationship scams that escalate to requests for money or gift cards
  • Fake delivery texts (Australia Post, toll roads) with links that harvest your card details

When it's time to call someone

You can handle some of this yourself. But call a professional straight away if:

  • Someone had remote access to your computer, even briefly
  • You're not confident the device is actually clean
  • It's a business computer or network — one compromised machine can spread to shared drives, email accounts, and other staff
  • You've secured your accounts but keep seeing strange pop-ups, slow performance, or unfamiliar programs

How CBI Technologies can help

Scam and fraud recovery is something we deal with regularly — it’s not an afterthought bolted onto a standard IT support list. It sits alongside our broader cybersecurity solutions, so if you’ve been targeted, we can:

  • Remove any remaining remote access tools or malware
  • Lock down and secure your accounts and device
  • Check what (if anything) was accessed or exposed
  • Explain what happened in plain English, without the jargon or the blame

We offer same-day appointments where possible, and a 24/7 helpdesk means you’re not stuck waiting until Monday if this happens on a Saturday night. We cover Rowville, Knox, Dandenong, Casey, Pakenham, Cranbourne, Clyde North, Berwick, Narre Warren, Warragul, Emerald, the Yarra Ranges, and the rest of Melbourne’s South-East — on-site or remote, whichever gets you sorted faster.

Call (03) 9970 9107

Frequently asked questions

Not on its own. If the device itself is still compromised, a new password can be captured just as easily as the old one. Get the device checked before you consider yourself safe.

Sometimes, especially if you contact your bank within hours and they can action a recall. It’s not guaranteed, but the odds drop fast the longer you wait — call your bank first, before doing anything else.

Yes. Reports help Scamwatch and banks identify and block scam patterns faster, which protects other people from the same attempt.

Treat it as more urgent, not less. Disconnect the device from the network (not just the internet) if you can, and let your IT support know immediately — one compromised machine can expose shared drives, client data, and other staff accounts.

We offer same-day appointments in most cases, particularly for businesses where downtime has a real cost. Call (03) 9970 9107 and we’ll find the fastest option available.

Been scammed?
Don't wait — call now.

The sooner you call, the more we can usually do. Same-day appointments and a 24/7 helpdesk across Melbourne’s South-East.

Contact us
or call (03) 9970 9107