[hnuser0000]

>The woman [from fake tech support] said she would clear the hackers out, but he had to give her access to his phone through an app she had him download.

[chrisjj]

Sure, but nothing in story says he did do that.

[mvdtnz]

That doesn't answer the question. No app on any Android or iPhone phone can reach out and take your PayPal credentials. These scam victims never own up to the most important fact - that they themselves give away the keys to the castle. There's always some hand-wavy techy explanation.

[asadotzler]

Easy enough to drop a remote access app or a fake Paypal app and let the idiot user put their credential into it.

[pavel_lishin]

> These scam victims never own up to the most important fact - that they themselves give away the keys to the castle.

I bet they were wearing a real short skirt, too.