A tech support scam occurs when a criminal pretends to diagnose or fix a device, account, subscription, or security problem. The approach may come through a call, browser pop-up, email invoice, search advertisement, or fake support website. The scammer wants payment, remote access, credentials, or financial information.
How tech support scams begin
- An unsolicited caller claims to work for Microsoft, Apple, Google, an antivirus company, or an internet provider.
- A browser pop-up says the device is infected and displays a phone number.
- A fake invoice says a subscription will renew unless you call to cancel.
- A sponsored search result shows a fraudulent support number beside a known brand.
- A caller poses as a bank fraud department and transfers the victim to supposed technical or government specialists.
A website can detect limited browser and device information. A random pop-up cannot scan an entire phone or computer and establish that it is infected. Do not call the number or click the buttons in the warning.
What the fake technician asks you to do
The scammer may request remote access, run harmless system commands and misrepresent normal results as evidence of infection, or install software. Some demand a support fee. Others claim to issue a refund, manipulate what appears on the screen, and instruct the victim to return an accidental overpayment.
The same access can expose email, password managers, documents, financial accounts, and one-time codes. A caller may tell the victim to hide the interaction from bank staff or keep a remote session open while signing in.
Warning signs of fake tech support
- The contact or warning was unexpected.
- A pop-up prevents normal navigation and demands a call.
- The technician asks for gift cards, cryptocurrency, cash, a wire, or a payment app.
- You must install remote-access software before the problem is verified.
- The caller asks you to sign in to banking or display a security code.
- A refund requires moving or returning money.
- The caller discourages you from speaking with family, bank employees, or another technician.
- The support number appears only in an advertisement, pop-up, email, or caller ID.
How to find legitimate support
Close the unexpected contact. Use the support function built into the product, type the companyâs known address, or obtain contact information from a receipt or account page. The first search result may be a paid advertisement, and scammers sometimes place fake numbers beside real company names.
If an employer manages the device, contact its IT or security team using the organizationâs established channel. Do not install software or change settings based on a strangerâs instructions.
What to do if a scammer has remote access
- Disconnect the device from Wi-Fi, Ethernet, or cellular data.
- End the remote session and close the software.
- Use a known-clean device to contact the bank and secure important accounts.
- Remove remote-access tools and other software you did not intend to install.
- Update the operating system and security software, then run a full scan.
- Review email forwarding, account recovery details, connected devices, and financial activity.
- Change exposed passwords and turn on two-factor authentication.
Removing the remote app ends that access path but does not undo changes already made or information already seen. A full factory reset may be appropriate when the attacker had administrative control, installed persistent software, or the device cannot be trusted after review. Back up necessary personal files and follow the device makerâs recovery guidance.
What to do if you paid fake support
Contact the payment company immediately. Ask the card issuer, bank, gift-card issuer, wire service, cryptocurrency platform, or payment app what fraud or recall process applies. Save receipts, card numbers, wallet addresses, transaction IDs, emails, screenshots, and phone numbers.
Report the incident at ReportFraud.ftc.gov. If personal information or account access was exposed, use IdentityTheft.gov for a tailored recovery plan.
How security software helps
Trusted antivirus can identify some malicious files and apps that a scammer installs. Link protection can warn about some known fraudulent destinations. Neither tool can determine whether a person on the phone is an authorized technician or whether a refund story is real.
Run security tools yourself from a trusted source. Do not accept a callerâs claim that a screen animation, command output, or scan result proves a device is compromised.
PSafeâs analysis of fake support
Before granting anyone access, confirm the problem in the product itself and contact support through a channel you found independently. A stranger who declares an emergency and controls both the diagnosis and the proposed fix has not verified either.
Frequently asked questions about tech support scams
Will a technology company call to report a virus?
An unexpected call claiming that a personal device is infected is a scam. Seek help through a support channel you know is genuine.
Are AnyDesk, TeamViewer, or similar tools viruses?
Remote-access tools have legitimate uses. The risk comes from granting control to an unverified person or leaving unattended access enabled.
Can screen sharing expose a password?
Yes. A remote viewer may see typed information, notifications, files, or account pages. Some software also permits control, file transfer, or persistent access.
Can a bank ask me to move money to protect it?
No legitimate bank or government representative will direct you to move money to a new account for protection. End the call and contact the bank yourself.
Does uninstalling the remote app solve everything?
No. Review accounts, settings, downloads, permissions, and financial activity because the attacker may have collected information or made changes during the session.