Tech support scam

What it is

Pop-ups, cold calls, and search-ad support numbers are common entry points. The scammer claims to be from Microsoft, Apple, your ISP, or a security brand. Once they have remote access, they can steal passwords, install malware, or invent refund tricks that raid your bank.

Legitimate companies rarely cold-call you about viruses on your PC.

How it works

1. Alarm — A full-screen warning, unsolicited call, or fake help result.
2. Authority — They claim to be official support and tell you not to hang up.
3. Access — You install remote tools or share screen control.
4. Pay — Fake fixes, subscriptions, gift cards, or refund overpayments.
5. Reuse — Credentials and banking sessions harvested for later fraud.
6. Sometimes the same crews pivot into identity theft with the data they collected.

Red flags

• Pop-ups that will not close and demand you call a number immediately
• Unsolicited calls about your computer's license or virus alerts
• Requests for remote-access software (AnyDesk, TeamViewer, etc.) out of the blue
• Payment by gift cards, crypto, or wiring for support
• A refund that asks you to send money back or buy crypto
• Search results for support numbers that lead to lookalike ads

What to do if you’re targeted

• **Close the pop-up** via Force Quit / Task Manager; do not call numbers shown in warnings.
• **Never grant remote access** to unsolicited callers.
• **If you did:** disconnect from the internet, uninstall remote tools, change passwords from a different clean device, and contact your bank.
• **Scan for malware** with reputable tools or professional help.
• **Report** to ReportFraud.ftc.gov (U.S.) and the impersonated brand's official abuse channel.
• **Optional:** identity scan if you typed passwords or personal data during the session.

Related terms

• Vishing
• Social engineering
• Account takeover