How can I remove scammer access and restrict downloads on a Windows laptop?

Start by disconnecting the laptop from the internet. Since someone had remote access, removing the one program you know about may not be enough. Back up any irreplaceable files, then do a clean Windows reinstall. Be careful about restoring programs or unfamiliar files from the backup.

Use a separate trusted device to change passwords, starting with email and banking. Contact the bank promptly if financial information or access was shared. Let them know what happened and follow their advice about accounts and cards.

After the reinstall, give them a standard account for everyday use and keep a separate administrator account with a password held by someone they trust. That stops many system-wide changes and installations.

It does not stop every downloaded program from running. Some remote access tools are portable or install just for the current user without asking for admin rights. If you need tighter control, look into application allowlisting, such as AppLocker where their Windows edition supports it. Test it carefully so banking and other needed apps still work.

Windows S mode might be worth a look for a laptop used mainly in a browser. It restricts app installation to the Microsoft Store, but check whether the laptop supports it and whether it fits the apps they need. It isn't a guarantee against scams, and it shouldn't be treated as a way to block every download.

For banking and videos, a Chromebook or a Linux setup could be an alternative if they don't need Windows applications. Check that their bank works properly in the browser first. A different operating system won't stop someone from giving a scammer passwords or card details, though.

Give them one simple rule alongside the technical changes: if a caller or a computer warning asks them to install something or grant access, stop and call a trusted family member first. A security tool that alerts a relative or blocks known remote access software could add another layer, but it won't catch every scam.