How Tech Support Scams Work and How to Spot Them

What happens in a tech support scam

A tech support scam starts with a pop-up, email, or phone call claiming your device has a virus, security problem, or needs urgent software updates. The message looks official — it might use your device's real name, mention a real company like Microsoft or Apple, or display a phone number that seems legitimate. The scammer's goal is to get you to call a number they control, visit a website they own, or download software they provide.

Once you make contact, the scammer asks for remote access to your computer or phone, or asks you to pay for fake "repairs" or "protection software." They may show you alarming error messages or fake scan results to create panic. Some scammers keep victims on the phone for hours, walking them through steps that appear to fix the problem but actually do nothing — or install malware that gives the scammer ongoing access to your accounts and personal information.

The financial damage varies. Some victims lose hundreds of dollars to a single scam. Others lose thousands when scammers use their access to drain bank accounts, steal tax refunds, or open credit cards in their name. The emotional toll is often worse: many people feel embarrassed or ashamed, which delays them from reporting the scam or telling family members what happened.

Key Takeaways

• Tech support scams begin with unsolicited pop-ups, emails, or calls claiming your device has a problem, and the scammer's goal is to gain remote access or collect payment.
• Legitimate companies like Microsoft and Apple do not contact you first about security problems — you contact them when you notice an actual issue.
• Never give remote access to your device, pay money, or download software based on an unsolicited message, even if it looks official.
• If you have already given access or paid money, contact your bank immediately and report the scam to the Federal Trade Commission at reportfraud.ftc.gov.
• Telling family members or a trusted friend about a scam, even an embarrassing one, helps protect you from follow-up scams and identity theft.

How scammers make the message look real

Scammers use several tricks to make their pop-ups and emails appear to come from companies you trust. They copy the logos, colors, and language of Microsoft, Apple, Amazon, or your bank. They may use a phone number that looks almost correct — for example, a number with the right area code but a fake exchange. They sometimes buy ads on search engines so their fake support pages appear at the top of results when you search for help.

Pop-ups are especially convincing because they appear on top of your screen and often block you from closing them easily. Some pop-ups make a loud alarm sound or flash warning messages to create urgency. The scammer counts on you being startled and not thinking clearly about whether the message makes sense.

Email scams often include details that seem specific to you — your real name, your device type, or a partial account number — which makes the message feel personal. Scammers buy this information from data breaches or simply guess based on common patterns. A message that says "We detected unusual activity on your Apple account" feels more real than a generic warning, even though the scammer has no actual information about your account.

Red flags that separate real alerts from scams

Legitimate companies almost never contact you first about a security problem. Microsoft does not call you. Apple does not send pop-ups telling you to call a number. Your bank does not email you asking you to download software or give remote access. If you see an unsolicited message claiming to be from a company, that alone is a red flag.

Real security alerts come from your device's built-in systems — your phone's settings app, your computer's control panel, or your bank's official app that you downloaded yourself. They do not ask you to call a number or download something from a link in a message. They do not create artificial urgency by saying "Act now" or "Your account will be closed in 24 hours."

Scam messages often contain spelling or grammar mistakes, use awkward phrasing, or ask you to do something that does not make sense. A real Microsoft alert would not ask you to "verify your Microsoft account by clicking here." A real bank would not ask you to confirm your password in an email. If you are unsure, hang up or close the message, then contact the company directly using a phone number or website you find yourself — not a number from the suspicious message.

What to do if you have already been scammed

If you gave a scammer remote access to your device, change your passwords immediately — starting with email and banking passwords, since those are the keys to everything else. Use a different device to change passwords if possible, or change them on your phone if you only have one device. If you cannot do this yourself, ask a trusted family member or friend to help, or visit your bank in person.

Contact your bank and credit card companies and tell them you may have been scammed. Ask them to watch your accounts for unauthorized charges and to alert you to any new accounts opened in your name. You can also place a fraud alert on your credit report by contacting one of the three major credit bureaus — Equifax, Experian, or TransUnion. A fraud alert tells lenders to verify your identity before opening new accounts.

Report the scam to the Federal Trade Commission at reportfraud.ftc.gov. The FTC does not investigate individual cases, but the information you provide helps them track scam patterns and warn the public. You can also report the scam to your local police department, though they may not pursue it. If the scammer has your Social Security number, consider placing a credit freeze, which prevents anyone from opening accounts in your name without your permission.

Protecting yourself from future scams

The strongest protection is skepticism toward unsolicited messages. If you did not ask for help, you do not need it. Pop-ups, emails, and calls that claim to be from tech companies or banks are scams until proven otherwise. Close the pop-up by pressing the power button on your device if you cannot close it normally — do not click anything in the pop-up itself. Delete the email. Hang up the phone.

Keep your actual security software up to date. Windows Defender (built into Windows computers) and the security features built into iPhones and Android phones are free and effective. You do not need to buy additional antivirus software, and scammers often use the promise of "protection software" as a way to get money or access to your device.

Tell family members or trusted friends about scams you have encountered, even if you fell for one. Scammers sometimes call back or target the same person multiple times. They also sometimes use information about you to target your family members. A family member who knows about the scam can help you spot a follow-up attempt or warn you if someone calls claiming to be from your bank.

What to do if someone you know has been scammed

If a family member or friend tells you they have been scammed, listen without judgment. Shame and embarrassment often prevent people from reporting scams or taking action, and criticism makes that worse. Your role is to help them take the next steps, not to make them feel worse about what happened.

Help them change passwords, contact their bank, and report the scam to the FTC if they are willing. If they gave remote access to their device, they may need help resetting it or taking it to a repair shop to check for malware. If they are not comfortable doing these things alone, offer to sit with them while they make phone calls or visit the bank in person.

Watch for signs of follow-up scams. Scammers sometimes call back claiming to be from the FTC or police, offering to recover the victim's money in exchange for a fee. This is another scam. The FTC and police do not call victims asking for money to recover losses.

Frequently Asked Questions

If I see a pop-up on my computer, is it safe to restart my computer to close it?

Yes. Restarting your computer is one of the safest ways to close a stubborn pop-up. Hold down the power button until your computer shuts down, then turn it back on. The pop-up will be gone. Do not click anything in the pop-up itself, and do not follow any instructions it gives you.

Can scammers actually see my screen if I give them remote access?

Yes. When you give remote access, the scammer can see everything on your screen, move your mouse, type on your keyboard, and access your files. They can see passwords as you type them, read your emails, and access your bank accounts. Never give remote access to anyone who contacts you first.

What if I already paid the scammer with a credit card?

Contact your credit card company immediately and report the charge as fraudulent. Credit card companies can often reverse the charge and issue you a new card. If you paid by wire transfer, bank transfer, or gift card, the money is much harder to recover, but contact your bank anyway — they may be able to trace the transfer or block it if it has not been withdrawn yet.

Is it too late to report a scam if it happened months ago?

It is never too late to report a scam. Report it to the FTC at reportfraud.ftc.gov and to your local police department. If the scammer has your personal information, you should also place a fraud alert on your credit report and monitor your accounts for unauthorized activity, even if the scam happened a long time ago.

How do I know if a pop-up is real or fake?

Real security alerts from your device do not ask you to call a number or download software. Fake pop-ups often use alarm sounds, bright colors, and urgent language to scare you into acting quickly. If you are unsure, close the pop-up, restart your device, and contact the company directly using a phone number you find yourself — not a number from the pop-up.