Nobody from Microsoft, Apple, or your internet provider is going to call you out of the blue to tell you your computer has a virus. They are not monitoring your device, they do not have a list of infected customers, and they will never phone you first. Yet every day, thousands of people get exactly that call — or see a terrifying full-screen “security alert” with a phone number to call — and end up handing criminals remote control of their computers and hundreds or thousands of dollars.
Tech support scams are a billion-dollar industry. The FBI’s 2025 Internet Crime Report puts “tech and customer support” fraud at $2.13 billion in reported losses across 47,794 complaints — making it one of the costliest cybercrime categories in America. The FTC adds that older adults alone reported $159 million in tech support scam losses in 2024, and older consumers are far more likely than younger ones to lose money to this particular fraud.
This guide covers the three main versions of the scam — the cold call, the fake popup, and the refund trick — the exact script the scammers follow, the red flags that give them away, what legitimate tech companies never do, and what to do if you already let one of them into your computer.
The Three Versions of the Scam
1. The cold call
Your phone rings. The caller claims to be from “Microsoft Support,” “Apple Security,” or “Windows Technical Department” and says your computer has been sending error messages, has a virus, or has been hacked. They sound professional and often know your name. None of it is real — they are calling thousands of numbers at random, and the “diagnosis” is invented before you even pick up.
2. The fake popup
You are browsing normally when your screen is taken over by an urgent warning: “WARNING: Your computer is infected!” or “Your Apple device has been blocked for security reasons,” complete with a loud alarm sound and a prominent phone number. The popup may freeze your browser so you cannot close it normally. Every element — the logos, the error codes, the countdown timer — is fake, and the phone number connects you to the same scam call center.
3. The refund trick
A twist for repeat victims: a caller claims you are owed a refund for a previous tech-support subscription or antivirus renewal you never bought. They ask for remote access to “process the refund,” then pretend to transfer too much money — say $5,000 instead of $500 — and beg you to return the difference via gift cards or wire transfer. No money was ever transferred; the “overpayment” is just numbers typed into a fake screen while you watch.
How the Script Works Once You’re Hooked
Whichever version pulled you in, the playbook from here is nearly identical:
- Remote access. You are told to install a remote-access tool (common legitimate ones abused for this include AnyDesk and TeamViewer) or to visit a website that downloads one. The moment you grant access, the scammer can see your screen — and everything on it.
- The fake diagnosis. The “technician” opens system tools and points to routine log entries, calling them viruses or hackers. To a non-technical viewer it looks convincing; to anyone technical it is obvious theater.
- The upsell. Fixing these invented problems costs money — typically a few hundred to a few thousand dollars for a “lifetime security plan.” Payment is demanded by credit card, and sometimes the scammer harvests the card details for later abuse.
- The real theft. While “scanning,” the scammer may open your browser, check saved passwords, or look for banking sessions. In the worst cases they install actual malware so they can return later.
- The callback list. Victims who pay are marked as easy targets and sold to other scam operations — which is how the “refund” version finds its victims months later.
Red Flags of a Tech Support Scam
- You did not initiate the contact. Real tech companies do not cold-call about viruses, and no legitimate security alert includes a phone number to call.
- A popup demands you call a number. Genuine operating-system warnings never display support phone numbers.
- Urgency and fear. Countdown timers, warnings that your data will be deleted, claims hackers are inside your network right now.
- They want remote access. A stranger asking to control your screen is the single biggest red flag in this scam.
- Payment by gift card, crypto, or wire. No legitimate company takes tech-support payment in iTunes cards or Bitcoin.
- The “technician” can’t answer basic questions — like which product you own, or your account details — without asking you first.
- They get aggressive when questioned. Threats, insults, or claims you will be arrested are pressure tactics.
- A “refund” requires you to log into your bank while they watch, or to return an “accidental overpayment.”
- Poor grammar mixed with official logos. Many popups pair stolen Microsoft or Apple branding with broken English.
- They ask you to lie to your bank — e.g., “tell them it’s for a family member” when a card payment is declined.
What Real Tech Companies Never Do
Memorize this short list — it settles nearly every case:
- Microsoft, Apple, and Google never call you unprompted about viruses or security problems on your device.
- Legitimate error messages never include a phone number to call for support.
- Real support agents never ask for remote access out of nowhere, and never ask for payment in gift cards, cryptocurrency, or wire transfers.
- No company will ever ask you to keep a support call secret from your bank or family.
If a situation violates any one of these, it is a scam — no further analysis needed.
How to Stay Safe: Practical Steps
- Hang up on cold callers. Do not argue, do not “test” them — just end the call.
- Never call a number from a popup. If a warning locks your browser, close the browser entirely (use Task Manager on Windows or Force Quit on Mac if needed) and restart. The “virus” vanishes with the tab because it was never real.
- Bookmark real support pages. If you ever need help, go to the company’s official site yourself or use support contact details from the product packaging — never from an alert.
- Keep your system updated with automatic updates and a reputable antivirus, so you can be confident random “infection” claims are false.
- Talk to older relatives. Tech support scams disproportionately target people over 60. A five-minute conversation — “Microsoft will never call you; hang up and tell me” — is remarkably effective protection.
- Use a separate, limited user account for daily computer use if you share a machine with a less tech-savvy family member, so malware or remote tools can’t easily gain full control.
Already Let Them In? Do This Now
- Disconnect from the internet immediately — unplug the cable or turn off Wi-Fi. This cuts the scammer’s access.
- Uninstall the remote-access software they had you install, then run a full scan with reputable security software.
- Change passwords from a clean device — start with email and banking, since those unlock everything else. Enable app-based two-factor authentication.
- Call your bank if you paid or shared card details: freeze the card, dispute the charge, and ask about a new card number.
- Have a professional check the machine if anything still seems off — a local repair shop you choose yourself, not anyone who contacts you.
- Monitor your accounts and credit reports closely for the next few months for signs of identity theft.
How to Report a Tech Support Scam
- Report to the FTC at ReportFraud.ftc.gov with the phone number, website, or popup details.
- Report to the FBI’s IC3 at ic3.gov if you lost money or gave remote access.
- Report the number to your phone carrier and through your phone’s spam-reporting feature.
- If the scammers impersonated a specific company, you can also forward details to that company’s official fraud-reporting channel — but only via an address you find on the company’s real website.
The Bottom Line on Tech Support Scams
Every tech support scam depends on one false belief: that a big tech company is watching your computer and will reach out to save you. They are not, and they will not. Cold calls about viruses, popups with phone numbers, and surprise “refunds” are all the same fraud in different costumes. Hang up, close the tab, and contact support yourself if you ever truly need it — that single habit defeats the entire industry.
Sources
- Federal Trade Commission, “FTC Issues Annual Report to Congress on Agency’s Actions to Protect Older Adults” (December 2025) — https://www.ftc.gov/news-events/news/press-releases/2025/12/ftc-issues-annual-report-congress-agencys-actions-protect-older-adults
- Security Boulevard, “$20.9 Billion and It’s Not Phishing: The Scams That Actually Drained Americans in 2025” (September 2026) — https://securityboulevard.com/2026/09/20-9-billion-and-its-not-phishing-the-scams-that-actually-drained-americans-in-2025/
- Axis Intelligence, “Online Fraud Statistics 2026: $36.8B in Reported Losses” — https://axis-intelligence.com/online-fraud-statistics/
- FBI Internet Crime Complaint Center, “2024 Internet Crime Report” — https://www.ic3.gov/AnnualReport/Reports/2024_IC3Report.pdf
Last reviewed: October 2026
This article is for education only and is not financial or legal advice.