What the scammer may have left behind
Remote-access tools, hidden accounts, forwarding rules in your email, saved passwords copied out of your browser, or genuine malware installed while they had control. A simple antivirus scan will not find most of it.