The basic trick
Tech support scams convince you that something is wrong with your computer, phone or account, and that the person contacting you can fix it. The problem is usually invented. The fix involves paying, handing over access, or both.
The contact comes in a few common forms:
- A pop-up or full-screen warning that claims your device is infected, locked or being hacked, often with flashing colors, alarm sounds and a phone number to call.
- An unexpected phone call from someone who says they work for a well-known technology company, your internet provider or “the security department.”
- An email or text warning that your account is compromised, or that a subscription renewal charge has been made and you should call to cancel.
- A search result or advertisement for a “support” number that is not the company’s real one. Someone looking for help with a service may end up calling a fraudulent line.
What these have in common is that you are pushed toward a conversation with a stranger, on their terms.
How the conversation tends to go
Details vary, but the sequence is often similar. The caller asks you to open a built-in tool on your device and shows you ordinary messages or error logs as “proof” of infection. Almost every computer shows warnings of some kind in these places, so this proves nothing. You may be asked to install remote-access software so they can “see” the problem. Then comes the offer: a cleaning service, a security package or a multi-year support plan, to be paid by card, bank transfer, gift cards or cryptocurrency. Sometimes a further call arrives later offering a “refund” for the service, which becomes a second opportunity to take money or bank details.
Giving someone remote access can expose files, saved passwords and online banking sessions, and can leave software behind. That is why fake support calls are about more than the fee.
Why fake alerts work
A screen warning feels personal and urgent. Scammers know that people fear losing photos, work or money, and that many of us feel unsure about technical matters. A sound, a countdown timer or a lock icon makes it seem as if the device is under attack. Some pop-ups are built to resist closing, making the trap more convincing.
Real security software and operating systems do show warnings. The difference is that they generally do not tell you to call a phone number, do not demand payment through a pop-up, and do not threaten that you will lose everything within minutes.
Warning signs
- A warning in your web browser that tells you to call a number, rather than showing a normal message from software you installed.
- A caller you did not expect who says they have detected a problem with your device or account. Genuine technology companies rarely phone people at random to report viruses.
- Insistence on remote access or on installing an unfamiliar program.
- Pressure to act at once, or to stay on the line.
- A demand for payment in gift cards, cryptocurrency or by wire transfer, or a request for card details to “verify” you.
What to do instead
If a pop-up appears
- Do not call the number or click anything in the window.
- Try to close the browser normally. If the page seems locked, you can usually use the normal task manager or force-quit function on your device, or restart it. Restarting often removes the pop-up. If your browser offers to restore the previous session, decline.
- Check your browser settings if the alert keeps returning, and remove any unfamiliar extensions or notification permissions. Following sensible browser safety habits, such as being careful with notification requests, helps here.
- Run a scan with security software you already trust, or the one built into your operating system.
- Keep software updates turned on. Updates close security gaps.
If someone calls
You can end the call without explanation. It is fine to say, “I will contact the company myself,” and hang up. If you are worried, look up the real support number from the company’s official website or from paperwork you already have, and ask whether they contacted you.
If you are unsure about your device
If you think your device may really have a problem, contact the manufacturer, your internet provider or a local, established repair shop through details you found yourself. Check how any paid service works before you hand over money or access.
If you have already responded
Stay calm and act in this order, as far as it applies to you:
- Disconnect the device from the internet to cut off any remote connection.
- Remove any remote-access program you were asked to install. If you are not sure how, a trusted technician can help.
- Contact your bank or card provider if you paid or shared card or account details. Tell them it was a support scam.
- Change passwords for important accounts from a different, clean device, especially email, banking and anything saved in your browser. Password reuse makes this step more important. Turn on two-step verification where available.
- Watch for unfamiliar charges and account activity in the coming weeks.
- Consider a professional check or a restore from a clean backup. Regular data backups make this much less painful.
- Report it to your national fraud-reporting agency, local police or consumer-protection office, and tell the company that was impersonated.
Outcomes vary, and money is not always recoverable, but quick action helps. This article is general information, not technical or legal advice. If you support a parent or grandparent, supporting older relatives by agreeing a simple rule, such as “hang up and call me before doing anything,” can protect them.