Tech Support Scams
What it is (1-liner)
Fake alerts, calls, ads, or "support numbers" that trick you into paying for bogus fixes or handing over remote access/payment info.
Red flags (top 5)
Pop-up says your device is infected and shows a phone number—real warnings don't do that.
Caller claims to be Microsoft/Apple/your bank and wants remote access.
Pressure to pay via gift cards/crypto/wires.
"We refunded too much—send it back" or "subscription auto-charged" ploys.
"Support" numbers embedded in ads or even on real pages via ad/URL tricks.
Do this now (60-second checklist)
Don't call the number. Don't click. Close the tab/app; navigate to official support yourself.
If you let them in: Disconnect from internet; uninstall remote-access apps they installed; change passwords; enable 2FA.
If you paid: Contact your card/bank to dispute and block further charges; then report to FTC/IC3.
Run a security scan: Windows Defender scan/Offline scan.
Report & support
Microsoft: Report tech-support scams to Microsoft.
Federal: Report at ReportFraud.ftc.gov and FBI IC3.
Mental health & immediate safety
If anxiety spikes or shame creeps in: Call/Text 988 (24/7). This is a professional con—lots of smart people fall for it.
Scripts you can copy
To the caller/pop-up "support": "I will not grant access. I'm ending this call and contacting the company via its official site."
To your bank: "I paid a tech-support scam. Please reverse charges, block recurring payments, and monitor for fraud."
To IT (work device): "Possible tech-support scam with remote access granted. Please check the device/network immediately."
Lock down & recover
Remove TeamViewer/AnyDesk (or other remote-access tools) and restart.
Change passwords on email/financial accounts; enable 2FA/passkeys.
Review recent card/bank activity; dispute anything suspicious.
On Windows, run Microsoft Defender Offline if pop-ups keep returning.
Platform-specific steps
Windows/Microsoft: Real error messages never include support phone numbers; report scams to Microsoft; run Windows Security scans.
Apple/macOS/iOS: Don't respond to unsolicited "Apple Security" calls/messages; go to Apple via official channels only.
Printable Quick Card (1-page content)
Don't call numbers in pop-ups. Close tab/app → Uninstall remote-access tools → Change passwords + 2FA → Dispute charges → ReportFraud + IC3.
FAQs
The pop-up was on a real site—was it legit? Scammers abuse ads/URL parameters to inject fake numbers into otherwise legit pages. Type the site yourself and find support inside.
They "refunded too much" into my account. Classic scam; banks don't require you to repay via gift cards/crypto. Contact your bank; report to FTC/IC3.
Should I wipe the computer? Often not necessary after removing access apps and scanning; if remote access persisted or you're unsure, consult a technician.
Last updated: Sept 28, 2025 • Reviewed by: ZoraSafe Safety Team