A loud warning fills your screen: your computer is infected, your data is at risk, call Microsoft (or Apple, or your bank) right now. It looks official, and it may even beep or freeze your browser. It’s a tech support scam. The FTC explains that these scams often start with a fake pop-up that looks like it’s from a well-known company and urges you to call a number (FTC).
How the scam works
- A pop-up, call, text or email claims there’s a virus or a hacked account.
- You call the number and a friendly “technician” asks for remote access to your computer.
- They pretend to scan it and “find” a problem, then charge you to fix it, often by gift card, wire transfer, crypto or a payment app.
- In a newer version, they say your bank or retirement account has been hacked and pass you to a fake bank or government agent who tells you to move your money to keep it safe (FTC).
Unlock the full guide with ImposterWatch Personal, US$9/mo
Members read every guide in full, plus get breach and dark web alerts for up to three email addresses, an AI-powered romance scam check every month, and account recovery help.
Get Personal, US$9/mo Already a member? Log in
Warning signs
- A pop-up or message that tells you to phone a number. That alone means it’s a scam.
- Pressure to act right now, or threats that you’ll lose your files.
- A request to install a remote access app or read out a verification code.
- Payment by gift card, wire, crypto or cash.
- Anyone telling you to move money to “protect” it.
If you already called, paid or gave access
- Hang up and disconnect the computer from the internet.
- Call your bank or card issuer on the number on your card and tell them what happened.
- From another device, change your email and banking passwords, and anywhere you reused them. Turn on multi-factor authentication.
- Uninstall any remote access app they had you install, and have a technician you trust check the computer.
- Expect “refund” calls later. Those are scams too (FTC on recovery scams).
Helping a parent
Older relatives are frequent targets. Tell them the one rule: a warning that asks you to call a number is always fake. Put your own number next to their computer so they call you instead.
Where to report
- US: ReportFraud.ftc.gov and the FBI’s IC3.
- Australia: Scamwatch.
- UK: Action Fraud (or Report Fraud in Scotland via Police Scotland 101).
- Canada: the Canadian Anti-Fraud Centre.
- New Zealand: Netsafe.
Questions
Would Microsoft or Apple really show me a warning with a phone number?
No. The FTC says real security pop-up warnings and messages will never ask you to call a phone number, and legitimate tech companies won’t contact you out of the blue to say there’s a problem with your computer.
I let them onto my computer. What now?
Disconnect from the internet, change your passwords from a different device, call your bank, and have a technician you trust check the computer.
They said my bank account was hacked and I should move my money. Is that real?
No. The FTC warns that newer tech support scams pass you to a fake bank or government “agent” who tells you to move money to a safe account. Only a scammer says that.
Check the number before you call anyone
Paste the phone number from the pop-up into the free phone scam check. ImposterWatch Personal (US$9/month, cancel anytime) adds AI-powered checks, breach alerts for up to three email addresses and account recovery help.
Run the free phone checkGet Personal, US$9/moMore guides
- How to check if an email is really from a company
- How to tell if a call is a scam
- Romance scam warning signs
- How to reverse image search a dating profile
- Military romance scams
- Crypto romance scams (pig butchering)
- Sent money to a romance scammer? What to do now
- Is my online match real? How to check
- Has my email been in a data breach?
- “I have your password” sextortion email scam
- How to tell if an email is a scam
- How to check if a website is fake
- Grandparent and family emergency scams
- Clicked a toll text link? What to do now
- Crypto romance scams: helping a parent
- All guides
General information only, not legal or financial advice. ImposterWatch is operated by Cloud Investments FZE (UAE) and is not a background check or private investigator service.