How to Recognize Tech Support Scams

No legitimate company will ever call you out of the blue to tell you your computer has a virus. Yet every day, thousands of people get exactly that call — or see an alarming popup warning them to dial a number immediately. Tech support scams are among the most common frauds targeting everyday computer users, and they succeed because they manufacture panic and then offer to sell you the cure.

Once you know the playbook, these scams are easy to spot. Here is how they work, the red flags to memorize, and what to do if one has already gotten to you.

How the Scam Usually Starts

There are two classic openings. The first is the popup: while browsing, a full-screen warning appears claiming your computer is infected, your files will be deleted, or your bank account is at risk — complete with an urgent phone number to call and sometimes even a spoken voice message. These popups are just web pages designed to frighten you; closing the browser tab ends the "emergency" instantly.

The second is the cold call. Someone claiming to be from Microsoft, Apple, or your internet provider calls to say they have detected viruses or suspicious activity on your computer. They often know your name and sound professional, sometimes with background noise that mimics a call center. Real technology companies do not monitor your home computer and do not call you about it — full stop.

The Script They Follow

Once you engage, the scammer follows a rehearsed routine. First, they build urgency: your computer will be locked, your identity stolen, your money gone — unless you act now. Then they ask you to install remote-access software (programs like AnyDesk or TeamViewer are legitimate tools that scammers abuse) so they can "diagnose" the problem.

Next comes the theater. They may open system logs full of normal warnings that exist on every computer and present them as proof of infection, or run a fake "scan" that always finds terrifying problems. Finally, the pitch: pay hundreds of dollars for a repair, a multi-year "protection plan," or a "security renewal." Some variants end with them locking your computer and demanding payment to unlock it.

Red Flags to Memorize

• Contact you did not request. A warning that appears uninvited — by popup or phone call — about a problem you never reported is the hallmark of the scam.
• Manufactured urgency. Countdown timers, threats of immediate data loss, and pressure not to hang up are designed to stop you thinking clearly.
• Requests for remote access. No stranger who contacts you first should ever be allowed to control your computer.
• Strange payment methods. Demands for gift cards, wire transfers, cryptocurrency, or payment apps are a near-certain sign of fraud.
• Refusal to let you verify. If they discourage you from hanging up and calling the company back on a number you looked up yourself, you have your answer.

What Legitimate Tech Support Never Does

Real support teams do not cold-call you about viruses, do not display popups ordering you to call a number, and do not ask for payment in gift cards or cryptocurrency. They will never ask for your full password, and they will never pressure you to decide in the next five minutes. If you contacted support yourself through the company's official website or app, that is a completely different situation — the danger is specifically in support that contacts you first.

How to Verify Before You Trust

The golden rule: hang up, close the popup, and look up the company's contact information yourself. If a popup freezes your browser, close it with your task manager (Ctrl+Shift+Esc on Windows, Force Quit on Mac) rather than clicking anything inside it. If someone calls claiming to be your bank or internet provider, hang up and call the number printed on your bill or bank card.

You can also search the phone number or the exact warning text online — scam numbers and popup messages are widely reported, and a quick search usually confirms it within seconds.

If You Already Gave Access or Paid

Act quickly but calmly. If the scammer is still connected, disconnect your computer from the internet immediately (unplug the cable or turn off Wi-Fi) and uninstall any remote-access software they had you install. Then, from a different device you trust, change the passwords on your email, bank, and other important accounts.

Run a full scan with reputable antivirus software, and ask your bank or card company to reverse the payment if you paid — tell them it was fraud. Finally, report it: in the US, the Federal Trade Commission takes reports at ReportFraud.ftc.gov, and reporting helps protect the next potential victim. There is no shame in it; these operations are professional, practiced, and designed to fool busy, trusting people.