Tech support scams: how they work and what to do if you called

Industry / situation. Updated 2026-09-13. About 4 minutes to read.

If you let a stranger remotely access your computer, disconnect it from the internet, call your bank on the number on your card, and change your passwords from a different device.

Microsoft says its error and warning messages never include a phone number, and it does not make unsolicited calls to fix your computer. The same is true of Apple, antivirus companies and your internet provider. A pop-up that locks your screen and tells you to call a number is a scam.

These scams are big business. The FBI received 47,794 tech and customer support scam complaints in 2025, with 2.13 billion dollars lost, and people aged 60 and over lost 1.04 billion of that. This guide walks through the script, the phrases that give it away, and exactly what to do if you let someone into your computer.

How the tech support script unfolds

The alarm: a full-screen pop-up with a warning sound claims your computer is infected or blocked, or an email says your antivirus or 'Geek Squad' subscription renewed for hundreds of dollars.
The call: you ring the number to fix it or cancel the charge.
The access: the 'technician' asks you to install a remote access tool such as AnyDesk, TeamViewer, UltraViewer or QuickSupport.
The show: they open system screens full of normal warnings and claim they prove hacking.
The payment or refund trick: you pay for a support plan, or they 'refund' your subscription, pretend to type too many zeros, and edit your bank page to show an overpayment.
The pressure: you must send back the difference with gift cards, a wire, crypto or cash handed to a courier.
The escalation: a fake bank or government caller says your accounts are compromised and your savings must move to a 'safe' account.

Phrases that give it away

'Do not turn off or restart your computer, or you will lose all your files.'
'Your IP address has been hacked from overseas.'
'Please download AnyDesk so I can remove the virus.'
'I refunded 4,000 dollars instead of 400 by mistake. Please send back the difference.'
'Your bank account is also compromised. I'll transfer you to the bank's fraud team.'
'Don't tell the bank staff what the money is for.'
'Pay with gift cards, Bitcoin or a wire today.'

The FBI has named the three-stage version the Phantom Hacker scam: a fake tech support agent, then a fake bank representative, then a fake government official, each moving the victim closer to transferring their savings.

Close a fake virus pop-up safely

Do not call the number and do not click anything inside the pop-up.
Close the browser tab or window. On Windows, press Ctrl and W, or open Task Manager with Ctrl, Shift and Esc and end the browser. On a Mac, press Command, Option and Esc and force quit the browser.
When you reopen the browser, do not restore the previous session.
Run a scan with your built-in security tool, such as Microsoft Defender, if you are worried.

If you let them in or paid

Disconnect the computer from the internet by turning off Wi-Fi or unplugging the cable.
Call your bank and card issuers on the numbers on your cards. Tell them a scammer had remote access, ask them to block payments and reissue cards, and dispute any charges.
From a different device, change your email password first, then banking and any passwords saved in your browser.
Uninstall the remote access app, then have the computer checked or reset before using it for banking again.
If you paid with gift cards, call the card company immediately to ask about freezing the balance.
Report it. US: ReportFraud.ftc.gov and ic3.gov. Australia: ReportCyber at cyber.gov.au, Scamwatch, and IDCARE on 1800 595 160. England, Wales and Northern Ireland: Report Fraud on 0300 123 2040, or Police Scotland on 101. Canada: the Canadian Anti-Fraud Centre on 1-888-495-8501.

Protect a parent's computer

Put a label on the computer: 'Real tech support never calls you or asks you to call. Call [your name].'
Check the installed apps list together and remove remote access tools you did not set up.
Keep the operating system and browser updated automatically.
Give them a day-to-day account without administrator rights, so software cannot be installed without a password.
Save the real support numbers for their bank and internet provider in their contacts, so they never search for one online.

Why reports have fallen in some countries but losses have not

Australia's National Anti-Scam Centre reported that remote access scam losses fell 34.1 percent in 2025 to 69.9 million dollars, crediting bank and telecommunications disruption. In the US, the scam has moved toward larger, multi-stage cases that end with cash or gold couriers.

The lesson is the same everywhere: the scam depends on you calling a number shown on a screen or answering a call you did not expect. Break that one step and the rest of the script cannot start.

Frequently asked questions

Does Microsoft or Apple ever call about a virus?

No. Microsoft says it does not make unsolicited calls to provide technical support, and its error messages never include phone numbers. Apple does not either. Hang up.

I called the number but did not give access. Am I safe?

Probably, if you did not install anything, share passwords or pay. Expect follow-up calls. Do not engage, and block the number.

They were on my computer for an hour. What could they have taken?

Assume they could see anything open or saved: browser passwords, documents, email and banking sessions. They may also have installed software to return. Follow every step in the section above.

Can I get money back from a tech support scam?

Card payments can often be disputed. Bank transfers may be recalled if you act fast. Gift cards and crypto are difficult, which is why scammers demand them.

Is it safe to search online for a company's support number?

Be careful. Scammers buy search ads and create fake support pages. Get support numbers from the company's official website, the app, or your account statement.