Blocking Exe File Downloads on Shared Computers
Remote access frauds work like this: You receive a pop-up warning that your computer is infected with a virus, or you get a phone call from someone claiming to be from Microsoft, your internet provider, or a well-known tech company. The scammer pressures you to “fix” the problem by granting them remote access to your computer. Alternatively, they may send you a link that downloads a .exe file disguised as a security update or a PDF. Once you run that file, the scammer gains full control—they can see your passwords, access your online banking, lock your files for ransom, or install keyloggers that record everything you type. For people aged 45 to 64, who often manage household finances or have retirement savings online, the consequences can be devastating.
The most effective way to block this attack vector is to configure your computer’s security settings or use free software to prevent .exe files from downloading at all on shared accounts. On a Windows computer, you can create a standard user account for family members or guests that does not have administrator privileges. Then, use Windows Defender or Group Policy settings to block execution of .exe files from the Downloads folder or from any location that is not a trusted install directory. This means that even if a scammer tricks a user into clicking a file, the computer will refuse to run it. On macOS, you can enable Gatekeeper and set it to allow only apps from the App Store, which automatically blocks unsigned .exe files. On a Chromebook or public library terminal, the system is often locked down by default, but you can still ask the administrator to apply these restrictions.
Why focus on .exe files specifically? Because they are the standard executable format on Windows, which remains the most targeted operating system for remote access fraud. Scammers know that many middle-aged users are not technical experts and may not know the difference between a .exe and a safe file like a .pdf or .jpg. By blocking .exe downloads outright, you remove the most common weapon from the scammer’s arsenal. This is not a perfect solution—some scams use .zip files containing .exe, or use other file types like .scr or .js. But blocking .exe is a high-impact, low-effort measure that stops the majority of remote access attacks cold.
For shared computers at home, you should also discuss this with everyone who uses the machine. Explain that if a website tells them to download a file to fix a computer problem, they should never proceed—and that the computer itself will now block such downloads. If someone at a library or hotel business center needs to download a legitimate .exe file, such as a trusted program from a known vendor, it should be done only by an administrator after verifying the source. No legitimate tech support company will ever ask you to download a .exe file from a pop-up or an unsolicited email.
Beyond blocking .exe files, there are other complementary steps. Use an ad blocker to reduce the number of fake virus warnings that appear on websites. Keep your operating system and antivirus software updated. Never give remote access to anyone who contacts you unsolicited. And if you do receive a suspicious phone call or pop-up, hang up or close the browser immediately.
Unreputable’s mission is to keep middle-class Americans safe from scams that drain their savings and invade their privacy. Remote access fraud is thriving because it preys on fear and urgency. But by taking the simple, no-cost step of blocking .exe file downloads on shared computers, you create a barrier that scammers struggle to cross. It is not a fix-all, but it is a critical layer of defense that every household should adopt today. Do not wait until a family member clicks on a fake “virus removal tool” and hands over the keys to your digital life. Block the exe, and keep control where it belongs—with you.


