Tech Support Scams: Fake Microsoft, Apple & Virus Alerts
A full-screen “virus detected” warning, a cold call from “Windows Support,” or a chat agent offering to “secure your PC” — tech support scams still steal money and full device control. In 2026, AI scripts and polished remote-support tools make the pitch smoother, but the endgame is the same: access, credentials, and irreversible payment.
What Is a Tech Support Scam?
Tech support scams impersonate Microsoft, Apple, Google, antivirus brands, internet providers, or “device security teams.” They claim your computer or phone is infected, hacked, or about to be locked. Then they push you to install remote-access software, share screen control, and pay for “cleanup,” “warranty,” or “refund processing.”
Microsoft, Apple, and major antivirus companies do not cold-call you about viruses. They also do not ask you to buy gift cards or wire money to fix your device.
How Scammers Get Your Attention
- Browser pop-ups and lock screens with fake warning sounds and phone numbers.
- Cold calls claiming unusual activity on your PC or Microsoft account.
- Search ads for “support” numbers that route to imposters.
- Imposter social/search ads that look like official help pages.
- Follow-up after another scam — “security teams” offering to undo damage for a fee.
The Remote-Access Money Flow
- 1Fear trigger. Pop-up or caller says your files, bank, or identity are at risk.
- 2Remote tool install. You are walked into AnyDesk, TeamViewer, Quick Assist, or similar.
- 3Fake diagnostics. They open Event Viewer or command windows and mislabel normal logs as “hacks.”
- 4Payment demand. Subscription “protection,” gift cards, crypto, or wire for “refunds.”
- 5Credential theft. While connected, they may harvest passwords, banking sessions, or crypto wallets.
If a stranger asks for remote control of your device, end the session. Real support you initiated will never need gift cards, and unexpected virus pop-ups with a phone number are almost always fraud.
Red Flags
- Unsolicited call or pop-up with a phone number to “fix support.”
- Pressure to install remote-access software immediately.
- Payment by gift card, crypto, wire, or payment app.
- Claims they found “hackers in your network” via normal system logs.
- Offer to “refund” money into your account after you send more funds first.
- Refusal to let you hang up and call the company through an official channel.
If You Already Gave Remote Access
- Disconnect from the internet (unplug Ethernet / turn off Wi‑Fi).
- Uninstall remote-access tools and restart the device.
- From a different clean device, change email, banking, and important passwords.
- Enable multi-factor authentication everywhere you can.
- Contact your bank/card issuer; watch for unauthorized transfers.
- Run a reputable malware scan; consider a professional wipe if financial apps were open during the session.
- Report at ReportFraud.ftc.gov.
How to Stay Safe
- Close pop-up “virus” pages with Task Manager / Force Quit — never call the number shown.
- Only grant remote access to people or companies you contacted first through a known channel.
- Keep OS and browser updates on; use built-in security tools.
- Teach relatives a family code: hang up on unexpected tech calls, then verify together.
- Paste suspicious support scripts or texts into ScanBeyond before you act.
Unsure if a support message is real?
Check the wording before you install anything or share your screen.
Analyze Message — Free