Key takeaways

A warning that tells you to call a number is not a real warning. Close it, never give a stranger control of your computer, and never pay a “technician” with gift cards, crypto, or a wire.

  • Legitimate tech companies do not cold-call, email, or text you about a problem with your device.
  • Remote-access software gives a scammer full view of your screen, including your bank login.
  • If you already paid or gave access, contact your bank first, then change passwords from a clean device.

If a company or website was named, check it in the scam directory.

How big the problem is

The FBI’s Internet Crime Complaint Center received about one million complaints in 2025 and reported $20.9 billion in total losses, according to its annual report as covered by Help Net Security. AARP’s summary of the report puts tech and customer support scams at $2.1 billion in reported losses. AARP’s summary also lists $7.7 billion in reported losses for people aged 60 and over.

Those totals only include people who filed a complaint. The FTC’s own 2025 data named imposter scams, which include fake business support, the most-reported fraud category, with about $3.5 billion in reported losses.

How the scam works

The FTC describes the pattern. First comes the hook: a pop-up that looks like it came from a well-known company, a call or text from a “technician,” or a search result or ad for a fake support line. All of them push you toward a phone number.

On the phone, the “technician” asks for remote access, runs a fake scan, and says it found malware. Then comes the bill. Some callers then pass you to a second person who says they are from the government or your bank, claims your money is at risk, and tells you to withdraw it or buy gold. That final step turns a few hundred dollars of loss into tens of thousands.

A newer version starts with an email or text about a renewal you never made. You call to cancel and are walked through a “refund.” The scammer then says they refunded too much and asks you to send the difference back. You send your own money to a stranger.

Eight warning signs

Any one of these is enough to stop. Several together mean you are talking to a scammer.

  1. A pop-up that tells you to call a phone number. A real security warning from a software maker does not ask you to phone anyone. If a full-screen alert with a siren, a countdown, or a locked browser tells you to call, treat it as a scam. Close the browser or restart the computer.
  2. A call, text, or email saying your computer has a problem. Legitimate tech companies do not contact you out of the blue to say your device is infected or hacked. Hang up on an unexpected caller who claims to be from Microsoft, Apple, your internet provider, or your bank.
  3. A request to install remote-access software. Anyone who asks you to download a program, read out a code, or let them “see your screen” is asking for control of your computer. With that control they can watch you log in to your bank, move money, and plant their own tools.
  4. A scan that “finds” viruses on the spot. The FTC says scammers pretend to scan your computer and then claim to find malware. A scan run by a stranger on the phone proves nothing.
  5. A fee for removal, a “lifetime plan,” or a software license. Charges for removing viruses, protecting your router, or renewing a “subscription” you never bought are the usual goal. Be most careful if the price is large, such as hundreds of dollars.
  6. Payment by gift card, wire, cryptocurrency, or a payment app. No real support company needs to be paid in gift cards or crypto. These methods are favored by scammers because, like cash, they are very hard to get back.
  7. An invoice or “renewal” notice with a number to call. Fake invoices claim you were charged for Geek Squad, McAfee, Norton, or similar services and tell you to call within 24 hours to cancel. Check your bank or card statement. If there is no such charge, the message was bait.
  8. A transfer to someone who says they work for the government or your bank. The second voice on the line may say your money is at risk and tell you to withdraw cash, buy gold, or move funds to a “federal safety locker.” No such locker exists, and no genuine bank or agency asks you to do this.

What real companies and agencies will and will not do

They will: let you contact support on your own, through the official website or app. They will show a charge on your statement if you bought something. They will let you say no and hang up.

They will not: cold-call to say your computer is infected, ask you to call a number on a pop-up, demand payment in gift cards or crypto, or ask you to move money to a “safe” account. According to the FTC, someone who works for the government will never demand payment.

If you want to check an account or subscription, do not use the number in the message. Look up the company’s number yourself, or open the app you already have.

If you already paid or let them in

  1. Stop contact. Hang up. Do not call back. Disconnect from Wi-Fi if they still have access.
  2. Call your bank or card company using the number on your card. Report the payment and ask for a reversal. Ask the bank to watch for new activity.
  3. Remove the software. Uninstall the remote-access program, update your security software, and run a full scan. Have a trusted technician check the computer if you can.
  4. Change passwords from a different, clean device. Start with email and banking, then any account that shares the same password. Turn on two-factor authentication.
  5. Report it. File at ReportFraud.ftc.gov, and at ic3.gov if you lost money. Gift card payments should also be reported to the card issuer.
  6. Ignore “recovery” offers. People who were scammed are often called again by someone offering to get the money back for a fee. See recovery scams.

Many tech support calls end with a “government” voice. The tactics overlap with the ones in our guide to government impersonation scams. For help slowing down any demand for money, read how to handle urgent payment requests.

More help from official sources

Scambaba is an independent educational project. Reporting and recovery options depend on where you live. How these guides are researched is on the editorial policy.

Frequently asked questions

Is a virus warning with a phone number ever real?

No. According to the FTC, real security pop-up warnings and messages never ask you to call a phone number. Close the tab or restart the computer. If a window will not close, shut down the browser from the task manager or force quit.

Will Microsoft or Apple call me about a problem with my computer?

Legitimate tech companies do not call, email, or text to tell you your device has a problem, the FTC says. If you are worried, open your device settings or the company’s official site yourself and look there.

What is the refund scam where they say they sent me too much money?

After taking a fee, the scammer sends you to a fake page to “receive a refund.” They then claim they paid too much and ask you to send the difference back, often by gift card or transfer. The refund never existed, so the money you send back is your own.

I let them into my computer. What should I do now?

Disconnect from the internet, remove the remote-access program, and run a scan with security software you trust. Change every password the scammer saw or that you reuse, starting with email and banking, using a different, clean device. Tell your bank what happened and ask a trusted technician to check the computer.

Can I get my money back if I paid with a gift card or by wire?

Sometimes, but you must act fast. Call your bank or card company, report the payment, and ask them to reverse it. For gift cards, contact the card issuer at once with the card numbers and receipt. Recovery is less likely the longer you wait.

Who do I report a tech support scam to?

In the United States, report it to the FTC at ReportFraud.ftc.gov, and to the FBI’s Internet Crime Complaint Center at ic3.gov if you lost money. Outside the US, use your national scam-reporting service, such as Action Fraud in the UK or Scamwatch in Australia.