A full-screen warning with alarm sounds says your computer is infected and displays a 'Microsoft support' number. Or the call comes to you: 'We've detected a virus on your machine.' Either way, the real infection is the person on the phone.
Tech support scams target trust in big brand names and discomfort with technology — which makes older adults a favorite target. Losses regularly run into the thousands per victim because the scam ends inside your bank account, not your computer.
How the scam works
1
The scare
A malicious ad hijacks your browser into a full-screen 'virus alert' that seems unclosable, or a cold caller claims to be Microsoft, Apple, or your ISP.
2
The connection
The 'technician' has you install remote-access software so they can 'diagnose' the machine. They run scripts that display scary-looking nonsense as proof.
3
The payment
Hundreds of dollars for fake repairs and 'lifetime protection' — by card, check photo, or gift cards.
4
The encore
Months later, the 'refund department' calls: the company is closing and owes you money. That refund becomes the overpayment scam, and the second hit is usually bigger.
Red flags to watch for
!A phone number in a virus warning
Real Windows and Mac security alerts never include phone numbers. Ever. That alone settles it.
!Unsolicited 'we detected a problem' calls
Microsoft, Apple, and your ISP don't monitor your device and don't cold-call about infections.
!Remote access requests
Letting a stranger control your computer hands them your files, passwords, and banking sessions.
!Payment for cleanup in gift cards
A 'security company' asking for Google Play cards is a punchline and a red flag.
!Refund calls from nowhere
Out-of-the-blue refund offers target previous victims. Being owed money you didn't ask about is bait.
What to do
✓Close the pop-up the hard way
The warning is just a webpage. Force-quit the browser (Ctrl+Alt+Del on Windows, Cmd+Option+Esc on Mac) or restart. Don't call, don't click.
✓Hang up on cold callers
No conversation needed. If you're worried, run your own antivirus scan or visit a local repair shop you chose.
✓If they had remote access
Disconnect from the internet, uninstall the remote software, run a full malware scan, and change passwords from a different device — banking first.
✓If you paid
Card payments: dispute with your bank. Gift cards: call the issuer to try freezing balances. Report at reportfraud.ftc.gov.
Frequently asked questions
My screen is frozen on the warning. Doesn't that prove infection?
No — the page uses fullscreen tricks and pop-up loops to feel unclosable. Force-quitting the browser or restarting clears it. If warnings persist after restart, run a reputable scanner.
They showed me errors in my system logs. Were those real?
They showed you routine, harmless entries that exist on every computer, narrated as emergencies. It's theater for non-technical audiences.
Is remote access software itself dangerous?
Tools like TeamViewer and AnyDesk are legitimate for people you trust. The danger is who's on the other end. If a stranger asked you to install it, uninstall it now.
Got a message that looks like this scam?
Paste it into Scambook's free AI checker for an instant verdict, or look up the phone number or website that contacted you.