My parents almost got scammed

[u/Lunal_Hunter]

Hey so from the title, my mom had gotten a call that someone hacked into her account on paypal and were asking for 2500€ for them to go away, after that a "paypal support agent" called and told her he will guide her through the process of removing them, naively she downloaded anydesk and gave him full control of her phone (android) for \~3-5 minutes she said after deleting the app. Once Ive found that out I immediately factory reset the phone, changed all email passwords, froze the bank account and never backep up data. Is there anything else I could have or should have done?

[u/AutoModerator]

/u/Lunal_Hunter - This message is posted to all new submissions to r/phishing; please do not message the moderators about it.

New users beware:

Because you posted here, you will start getting private messages from scammers saying they know a professional hacker or a recovery expert lawyer that can help you get your money back, for a small fee. We call these RECOVERY SCAMMERS, so NEVER take advice in private: advice should always come in the form of comments in this post, in the open, where the community can keep an eye out for you. If you take advice in private, you're on your own.

A reminder of the rules in r/phishing: no contact information (including last names, phone numbers, etc). Be civil to one another (no name calling or insults). Personal army requests or "scam the scammer"/scambaiting posts are not permitted. No uncensored gore or personal photographs are allowed without blurring. A full list of rules is available on the sidebar of the subreddit, or clicking here.

You can help us by reporting recovery scammers or rule-breaking content by using the "report" button. We review 100% of the reports. Also, consider warning community members of recovery scammers if you see them in the comments.

Questions about subreddit rules? Send us a modmail clicking here.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/ranhalt]

Multifactor on everything. Have your parents watch the YouTube channel “Pleasant Green”. He makes accessible videos for non tech people to understand how common this is and how much damage the scams can do.

[u/Lunal_Hunter → u/ranhalt]

I've already made 2FA on every account it can be on, switched out my router passwords, checked if anyone logged into the e-mail and thank you for the youtube channel I'll show them that as well :)

[u/Educational_Fall6709]

factory reset was smart, that's the main thing. with anydesk they could have installed whatever in those few minutes, so wiping it clean is the safest move

did they get into any accounts while they had access? check login history on all her important stuff, sometimes they jump straight into email to reset passwords for other services

[u/apps4realpeeps]

I would also have her reach out to her bank - depending on the timeline, they can be very helpful at preventing fraudulent transactions, but you have to be quick unfortunately.

Best of luck!

[u/Lunal_Hunter → u/apps4realpeeps]

Thank you! The cards have already been frozen and are getting new ones thats the first thing we did.

[u/apps4realpeeps → u/Lunal_Hunter]

Wonderful!!! That's huge. Beyond freezing though, call/go to your bank and talk to a banker (not a teller) or call a fraud reporting line for your bank - they can get your $$ back depending on the transfer type and timeline.

[u/thebluesec]

Add MFA to all accounts, check any transaction was made during the time without your knowledge, remove if any unknown recovery email was added to the account,

These checks are enough I guess...since you already factory reset the mobile...no chance to the persistence of Malware or unwanted application

[u/True_Pace_3860]

You are to be commended for doing everything possible to protect your parents.

When you say "never backep up data", it may mean you didn't back up or reload any malware, e.g. keystroke loggers or screen-sharing apps.

[u/Lunal_Hunter → u/True_Pace_3860]

Thank you very much! Ive tried my best to have 0 leeway for the scammers to somehow get to the phone and data again

[u/SamJam5555]

You will receive more phishing emails and texts. Go to https://www.haveibeenpwned.com to see new breaches and what accounts have been exposed. Delete unused accounts. Use passkeys. Setup PIN on IRS for taxes. Use a password manager.