What it looks like
Pop-up: "WARNING! Your computer is infected. Do not shut down. Call Windows Support immediately at [number]."
How the tech support remote access scam works
- A scary pop-up freezes your browser, or you get a call or a fake 'subscription renewal' email.
- You call the number and a 'technician' asks you to install a remote access app such as AnyDesk or TeamViewer.
- They run a fake 'scan' and show you made-up problems.
- They charge a fee, or say you got a refund by mistake and ask you to send money back.
- While connected they may open your bank account or hide what they are doing on the screen.
- Some pass you to a fake 'bank' or 'government' agent who tells you to move your savings to a 'safe' account.
Red flags
- A virus warning with a phone number to call.
- An unexpected call from 'Microsoft', 'Apple', your internet provider or bank about your computer.
- Request to install AnyDesk, TeamViewer or any screen-sharing app.
- An invoice email for a subscription you never bought, asking you to call.
- A 'refund' that was 'too much' and must be sent back.
- Requests to pay by gift card, crypto, wire transfer or to withdraw cash.
- Being told to move money to protect it.
What to do
- Close the browser (use Task Manager or restart if it is frozen). Do not call the number.
- If you gave access, disconnect from the internet and uninstall the remote app.
- Change passwords for email and banking from a different, safe device.
- Call your bank right away to block cards and stop transfers.
- Get the computer checked or scanned with trusted security software.
- In India, call 1930 at once and file a complaint at cybercrime.gov.in. Fast reporting gives the best chance to freeze the money.
- US: ReportFraud.ftc.gov. UK: Report Fraud (formerly Action Fraud) on 0300 123 2040.
Protect your family
Put a note by the elder's computer: 'Never call a number from a pop-up. Never let anyone connect to this computer. Call me first.' Many victims are older adults who trust a confident caller.
Also known as: fake Microsoft support, computer virus pop-up scam, remote desktop scam
Questions people ask
Does Microsoft call people about viruses?
No. Microsoft says it never makes unsolicited support calls and its real error messages never include a phone number.
I let a scammer access my computer. What now?
Disconnect from the internet, uninstall the remote access app, change passwords from another device, call your bank, and report it. In India call 1930.
Is the pop-up saying my computer is locked real?
No. It is a web page made to scare you. Close the browser or restart the computer. Do not call the number shown.