A tech support scam is a trick that gets you to believe your computer or phone is broken, then convinces you to pay a stranger to “fix” it. The scam usually starts with a scary pop-up, an unexpected phone call, or a text message. The goal is always the same: get your money, your remote access, or your personal information.
You spot one by watching for pressure tactics. Real tech companies do not call, text, or email you out of nowhere to say your device has a problem. If someone contacts you first and sounds urgent, treat it as a warning sign.
Warning Signs to Watch For First
- An unexpected pop-up that locks your screen. It may claim to be from Microsoft, Apple, or your antivirus company and tell you to call a number right away.
- A call or text from someone claiming to be tech support. They say they detected a virus or breach on your device, even though you never contacted them.
- A request for remote access to your computer. This lets them see and control your files, accounts, and passwords.
- Pressure to pay with gift cards, wire transfers, or cryptocurrency. These payment methods are hard to trace and even harder to get back.
- A demand to act immediately or “your data will be lost.” Scammers do not want you to slow down and think.
How the Pop-Up Version Works
The pop-up usually appears while you are browsing the internet. It may fill your whole screen and tell you to call a phone number for “urgent help.” The number does not connect you to Microsoft, Apple, or any real company. It connects you to a scammer.
The safest response is to not call the number. Close the browser window, or restart your device if the pop-up will not go away. A real security warning from your operating system or antivirus software will never ask you to call a phone number.
How the Phone Call Version Works
In this version, a scammer calls or texts first. They may say they work for a well-known tech company and claim to have found a problem on your account or device. Once they have you on the phone, they try to walk you through installing remote-access software. If you install it, they can see your screen and control your device as if they were sitting in front of it.
Why Remote Access Requests Are So Risky
Giving a stranger remote access to your device is one of the most damaging steps in this scam. Once connected, they may look through your files, view saved passwords, or open your online banking. Some scammers will fake a “refund” screen during this session to trick you into thinking they overpaid you, then pressure you to send the difference back — which is the actual theft.
If you ever gave remote access to someone you did not already trust, treat your device and accounts as compromised and move to the recovery checklist below.
The Refund Trick, Explained
This tactic often shows up after an initial contact. The scammer says you are owed a refund for a service you never bought. They ask for remote access to “process” it, then show you a fake bank screen that looks like they deposited too much money. They insist you send the extra amount back immediately, often through a gift card or wire transfer. In reality, no money was ever refunded — they are just moving your own funds or tricking you into buying gift cards for them.
Recovery Checklist: Device, Passwords and Accounts
If you gave a scammer remote access, made a payment, or shared account details, work through these steps in order.
- Disconnect the device from the internet. Turn off Wi-Fi or unplug the ethernet cable to cut off remote access right away.
- Uninstall any remote-access software the scammer had you install, then run a full scan with trusted antivirus software.
- Change your passwords from a different, trusted device. Start with email and banking, since those accounts can be used to reset others.
- Turn on multifactor authentication for email, banking, and other important accounts. This adds a second check, like a code sent to your phone, so a stolen password alone is not enough to get in.
- Contact your bank or card company if you shared payment information or made a payment. Ask about reversing the charge and watch your statements for unfamiliar activity.
- Check for unauthorized subscription charges. If you see a charge for a “tech support” service you never approved, dispute it with your card issuer.
- Consider a factory reset if the scammer had extended access to your device, after backing up personal files you trust are clean.
How to Report a Tech Support Scam
Reporting helps investigators track scammers and warn other people, even if it does not undo the damage right away.
- File a report with the FTC at ReportFraud.ftc.gov. Include how the scammer contacted you, what they asked for, and how you paid.
- Report the impersonation to the real company the scammer claimed to represent, such as Microsoft or Apple, through that company’s official site.
- Contact your local police if you lost money or the scammer accessed sensitive personal or financial information.
- Tell friends or family what happened, especially older relatives, since older adults are frequently targeted by this scam.
Everyday Habits That Lower Your Risk
You do not need to be a technical expert to stay protected. A few consistent habits go a long way:
- Use a password manager and a unique, long password for each account instead of reusing the same one everywhere.
- Turn on multifactor authentication wherever it is offered, especially for email and banking.
- Install software and operating system updates promptly, since delayed updates leave known flaws open to attackers.
- If you need real tech help, contact a company or store you already know and trust rather than a number from a pop-up or unsolicited call.
For more on pressure tactics used online, see our related guide on spotting fake countdown timers and scarcity claims.
Extra Caution for Older Adults and Caregivers
Tech support scams disproportionately target older adults, in part because scammers assume less familiarity with how legitimate tech companies operate. If you help care for an older parent or relative, it can help to talk through these warning signs together before a scam call happens, and to agree in advance that they will call you before giving anyone remote access or payment information.
Before You Trust Any Contact Information
Scammers often set up fake websites and phone numbers designed to look official. Before calling a number from a pop-up, email, or ad, verify it independently by typing the company’s real website address directly into your browser. Our guide on checking a company’s real contact information walks through the same verification habit in a shopping context.
Frequently Asked Questions
Is it a scam if the pop-up has a real company’s logo on it?
Yes. Scammers copy real logos and branding to look convincing. A logo alone does not prove a pop-up or call is legitimate. Real security alerts never ask you to call a phone number.
I already gave someone remote access. What should I do first?
Disconnect your device from the internet immediately, then work through the recovery checklist above, starting with removing the remote-access software and changing passwords from a separate device.
Can I get my money back if I paid with a gift card?
It is difficult, but contact the gift card issuer as soon as possible and explain what happened. Also report the scam to the FTC, since reports help authorities track scammers even when recovery isn’t guaranteed.
How do I report a tech support scam?
File a report at ReportFraud.ftc.gov, report the impersonation to the real company the scammer claimed to be from, and contact local police if you lost money or shared sensitive information. See our guide on reporting suspected fraud to the right agency for more on how these reports are used.
Evidence Limits and Educational Disclaimer
This article summarizes public guidance from the Federal Trade Commission and the Cybersecurity and Infrastructure Security Agency (CISA) as of publication. Scam tactics change over time, and this guide does not cover every variation. It is for general education only and is not legal, financial, or technical advice for your specific situation. If you believe your accounts or identity have been compromised, contact your bank, your account providers, and, if needed, a qualified professional for help with your individual case.
