Recognizing Tech Support Scams

How These Scams Usually Start

A tech support scam begins by convincing you that something is wrong with your computer. The problem is invented, but the fear it creates is real. Once you are worried, the scammer offers to fix it, for a fee or by taking control of your machine.

There are a few common entry points:

• A pop-up or full-screen warning in your browser. It may claim a virus has been found, flash alarming colors, play an alarm sound, and show a phone number to call. Sometimes the page is built to seem hard to close.
• An unexpected phone call. The caller claims to be from a well-known software company, your internet provider or a “security department,” and says your computer has been sending out errors or has been hacked.
• An email, text or search result. A message may warn of a suspicious charge and give a number to call, and a search for a support number can lead to a lookalike listing.

Legitimate companies generally do not monitor individual home computers and then phone people out of the blue about viruses. A real error message in your browser also cannot know that your machine is infected. A web page has no ability to scan your computer the way a security program installed on it does.

Why They Work

These scams succeed because they use pressure rather than skill. Common tactics include:

• Urgency. You are told that data is being stolen right now, or that your accounts will be locked unless you act immediately.
• Authority. The caller uses technical vocabulary, a confident tone, and the name of a respected company.
• Fake proof. A scammer may have you open a normal system screen that lists routine warnings or harmless error entries and describe them as evidence of an attack. These screens exist on healthy machines too.
• Isolation. You may be asked not to tell anyone, or to stay on the phone while you follow steps, so there is no chance to think.

What the Scammer Wants

The aims differ, but they often include:

1. Remote access. You are asked to install a remote-control program or to type in a code so the caller can see and control your screen. Once they have access, they can look at files, install unwanted software, or lock you out.
2. Payment. You are charged for a “repair,” a “security plan,” or “lifetime support,” often asked to pay in unusual ways that are hard to reverse, such as gift cards, wire transfers or cryptocurrency.
3. Account details. You are asked to log into your bank to “receive a refund” while they have access to your screen.

Safe Ways to Respond

If a pop-up appears:

• Do not call the number shown, and do not click inside the page, even on a button that says “close.”
• Try closing the browser tab or window normally. If it will not close, use your system’s task manager or force-quit option to end the browser, or restart the computer.
• When you reopen the browser, decline any offer to restore the previous session, so the page does not load again.
• If the problem recurs, check the browser for unfamiliar browser extensions.

If someone calls you:

• Hang up. You do not owe a polite goodbye to a caller who has frightened you.
• If you want to check, find the company’s contact details yourself from an official source and call them. Do not use a number the caller gave you, and do not call back on the number that showed on your screen, which can be faked.
• Never give out passwords, one-time codes or payment details to an unsolicited caller.

In general:

• Do not install software because someone on the phone or a web page told you to.
• Do not allow a stranger to connect to your computer remotely.
• Do not pay with gift cards or other unusual methods for any computer service.
• Talk to a family member or friend before acting.

If You Already Went Along With It

It is common, and there is nothing to be embarrassed about. Scammers are skilled, and many thoughtful people have been caught. What matters now is limiting the harm.

1. Disconnect the computer from the internet by unplugging the cable or turning off Wi-Fi. This cuts off any remote session.
2. Remove any remote-access software the caller had you install. If you are not sure how, follow your system’s normal process for uninstalling programs, or ask a trusted person for help.
3. Change your passwords from a different device you trust, starting with email, banking and anything you used while the caller was connected. Use strong passwords that you have not used before, and turn on two-factor sign-in where it is offered.
4. Contact your bank or card company right away if you paid or shared financial details. Ask about reversing charges and protecting the account, and use the number printed on your card or statement.
5. Run a full scan with your system’s built-in security tool, and look at the points in malware warning signs for behavior that deserves a closer look.
6. Consider a fresh start. If you cannot be sure what was changed, saving your important files and doing a clean reinstall is the most dependable option. A recent backup makes this much easier.
7. Report it to the fraud reporting service in your country.

Expect more calls afterward, sometimes from someone offering to “recover” money for a fee. That is usually a second scam.

A Simple Rule to Remember

A real warning from your own security program or operating system appears on your own computer, and it does not ask you to phone anyone. When a screen or a stranger tells you to call a number, pay, or give control of your computer, that is the signal to stop.