Tech support scam: how to spot it and what to do
"Hello, this is Microsoft technical support. Your computer has been infected." Or there's no call at all – just a red warning that fills your browser, sounds an alarm and shows a phone number. Both are scams. Here is how to recognise them and what to do if you've already let a scammer into your computer.
Key points
- Microsoft won't call you to offer tech support unless you contacted it first, and real error messages never include a phone number to call. A call or pop-up like that is a scam.
- Hang up. Close the pop-up (Alt+F4, or restart the computer) and never call the number on it.
- Gave a "technician" remote access? Disconnect from the internet, uninstall the remote access app, run a security scan and change your passwords from another device. If they could see your online banking, call your bank now.
- Report it: to the FTC at ReportFraud.ftc.gov in the US, to Report Fraud in the UK, and to Microsoft at microsoft.com/reportascam.
How the scam works
Scammers pretend to be technical support from Microsoft (or Apple, your internet provider or an antivirus company) and claim your computer is infected or has been hacked. They usually reach you in one of three ways:
- A phone call or text. A "technician" contacts you out of the blue. To "prove" there's a problem, they may get you to open a built-in Windows tool full of warnings that look alarming but are completely normal.
- A pop-up. While you're browsing, a fake warning appears – often full-screen and with a siren sound – saying your computer is locked or infected. The FTC describes these as fake pop-ups that look like they come from a well-known company and urge you to call a phone number.
- A fake renewal notice. An email or text says you've been charged for an expensive subscription renewal and must call within 24 hours to dispute it. More on this variant below.
Then comes the "fix": install a remote access app (AnyDesk, TeamViewer, QuickSupport and similar) so the technician can connect. From that moment they can see and control your computer. According to Microsoft, they use that access to steal information or install malware – and to charge you for repairing a problem that never existed.
How to tell it's a scam
| What happens | What it means |
|---|---|
| "Microsoft" (or another tech company) calls, emails or texts you first about a problem with your computer | Scam. Microsoft says it won't call you to offer tech support unless you contacted it first, and the FTC says legitimate tech companies don't contact you this way. |
| An error message or pop-up shows a phone number | Scam. Real error messages and security warnings never ask you to call a phone number. |
| They want you to install AnyDesk, TeamViewer or similar | Never give remote access to someone who contacted you. |
| They rush you or threaten data loss or a locked computer | Pressure is a classic sign of fraud. |
| They want payment by gift card, crypto, wire transfer, payment app or cash | Scam. These are the payment methods the FTC lists – and once you've paid, it's hard to get the money back. |
| They ask for your ID, Social Security or National Insurance number, or your online banking login | Scam. Nobody needs these to fix a computer. |
What to do right now
- Someone calls claiming to be tech support: hang up. Don't install anything and don't share anything about your computer or your bank.
- A pop-up with a phone number: don't call it. Close the browser straight away; if the mouse doesn't respond, press Alt+F4, and if the browser still won't close, restart the computer. When you reopen the browser, don't restore the previous session.
- Worried something really is wrong with your computer? Microsoft suggests calling a trusted advisor or family member. Run a full scan with your built-in security software.
I let the "technician" in. What now?
| What happened | What to do |
|---|---|
| You gave remote access | Disconnect the computer from the internet (cable and Wi-Fi). Uninstall the remote access app. Update your security software, run a full scan and delete anything it flags. If you're not sure what the scammer did, have the computer checked by a professional or reinstall the operating system. |
| They could see your online banking, or you logged in during the session | Call your bank immediately on the number on your card or its official website. Ask it to block online access and check for payments. Don't log in to your bank from that computer until it's been checked. |
| You gave a password, or they could see saved passwords | From a different, clean device, change the password for your email, bank and other important accounts and turn on two-factor authentication. Change it anywhere else you used the same password. |
| You paid by card | Report it to your bank or card issuer right away and ask them to reverse the charge. |
| You paid by bank transfer | Report it to your bank immediately and ask it to reverse the payment. In the UK, bank transfers may be covered by reimbursement rules – see the fake bank call guide. |
| You paid with a gift card, wire transfer or crypto | Contact the gift card issuer, the wire transfer company, or the crypto exchange or ATM operator straight away. Say you were scammed and ask for a refund. Keep the card and receipt. |
| You sent a photo of your ID or your Social Security number | Assume it may be misused. In the US, follow the steps at IdentityTheft.gov; elsewhere, report it to the police and watch for credit applications in your name. |
For changing passwords and recovering accounts in detail, see Account hacked: how to get it back. If the scammer sent you to a page where you typed in your details, see Entered your details on a phishing site.
Report it
- US: tell the FTC at ReportFraud.ftc.gov.
- UK: report it to Report Fraud at reportfraud.police.uk or on 0300 123 2040 (England, Wales and Northern Ireland); in Scotland, call Police Scotland on 101. Send the address of a fake pop-up website to the NCSC through its Report a scam website form.
- Microsoft: report a scam that used Microsoft's name at microsoft.com/reportascam.
- Elsewhere: contact your bank first if you've lost money, then your local police.
Have the details ready: the number that called, the time of the call, the web address of the pop-up and your bank statement.
Protect yourself next time
- Remember one rule: anyone who contacts you first and wants to connect to your computer is a scammer.
- Only install remote access software when you contacted support yourself, using the company's official contact details.
- Tell your parents and grandparents about this scam. Microsoft also encourages warning friends and family.
- Check suspicious links without opening them with our link checker.
Sources
Spotted a mistake? Let us know and we will correct it openly.
Related
Article
"Hi Mum, I've got a new number": how to spot the scam and what to do
A message from a number you don't know: "Hi Mum, I dropped my phone, this is my new number." A few messages later comes a request for an urgent payment. It isn't your child – it's a scammer. Here is how to tell, how to check safely and what to do if you've already sent money.
Article
A fake bank called me: how to spot it and what to do
Your bank's name shows up on the screen, the caller is polite and says someone is draining your account. It's one of the most common phone scams there is. Here's how to recognise it in seconds – and what to do if you've already sent money or shared a code.
Article
Entered your details on a phishing site: what to do right now
You followed a link in a text or email and typed in your card number, your online banking login or a password – and only then realised the site was fake. Minutes matter. Here is what to do, most urgent first.