A caller helping with a loan should not need unrestricted access to your computer simply to explain an application field. Remote-access software can expose more than the one page you intend to discuss: open banking tabs, saved files, email and account recovery messages may also be visible or accessible.
Recognize the change in the request
A conversation may start with an ordinary question about a document, then shift to installing software, sharing a connection code or opening your bank account while the caller watches. Treat that shift as a new request requiring verification. The fact that you have already spent twenty minutes on the call does not authorize it.
The FTC describes tech-support scams that seek remote access or financial information. A loan-related explanation can be used to create similar pressure. Do not install a tool or grant a session because an unverified person claims that it is the only way to release funds.
Return to a known contact route
End the session or call and reach the institution through details saved in your own records. Ask whether its staff made the request and whether there is a document-upload or written-support alternative. Explain the exact software or access requested rather than asking only whether the company “uses computers for verification.”
If genuine technical support is needed, establish who will connect, what they need to see and how access ends. Do not open financial accounts for someone whose identity and purpose remain unresolved.
If access was already granted
Stop the remote session. If you cannot confidently end it, disconnect the device from its network and obtain help through a support provider you independently know. Use another secure device to contact your bank if financial access or a transfer may have been exposed.
Write down what was open, what you typed and any action the caller performed. Avoid assuming that the absence of an obvious transfer means nothing happened. Follow the account provider’s instructions for protecting access, and have the device checked before using it for sensitive activity again.
Keep the evidence separate from the caller
Save the contact details, session time, software name and payment requests if available. Do not reconnect to “collect proof” or let the same person sell you a cleanup service. Verification and recovery should proceed through independently established channels.
