A message suddenly appears saying your computer has a virus. A caller claims to be from Microsoft or Apple and says your files are at risk. They offer to fix everything if you call a number or let them connect to your computer.
This could be a tech support scam. Scammers pretend to be computer experts or employees of well-known companies to frighten people into paying for help they do not need, or handing over access to their devices and personal information. The good news is that there are clear warning signs you can learn to spot.
Step 1: Understand how a tech support scam works
A tech support scam begins when someone tries to convince you that your computer, phone, or online account has a serious problem. The person may claim to represent a familiar company, such as Microsoft, Apple, an internet provider, or an antivirus brand.
The contact can arrive in several ways:
- A pop-up warning: A message appears while you are browsing and claims your computer is infected. It may display a phone number and tell you to call immediately.
- An unexpected phone call: Someone calls and says they have detected a virus, suspicious activity, or a problem with your computer.
- An email or text: A message claims that a security subscription is expiring or that you have been charged for a renewal. It tells you to call a number to cancel or request a refund.
- A search result or online advert: A phone number appears when you search for technical support. The result may look genuine but lead to a fake support service.
The scammer may then ask you to install remote access software. Remote access is a way for another person to control or view your computer over the internet. It has legitimate uses, but giving access to an unexpected caller can put your files, accounts, and personal information at risk.
Good to know: A real security warning does not need you to call a phone number displayed in a pop-up. Close the message and check your device using its normal security settings or a support contact you find independently.
Step 2: Recognize the warning signs
Scammers often try to make you feel worried and rushed. They want you to act before you have time to check whether their story is true.
Be cautious if someone:
- Contacts you unexpectedly and claims to have found a problem with your computer.
- Says you must act immediately or your files, money, or identity will be at risk.
- Tells you to call a phone number shown in a pop-up warning.
- Asks you to install an app or give them remote access to your device.
- Requests your password, banking details, card number, or security code.
- Demands payment by gift card, cryptocurrency, wire transfer, or another unusual method.
- Claims to have sent you a refund by mistake and asks you to return some of the money.
A professional-sounding voice, company logo, caller ID, or official-looking website does not prove that someone is genuine. Scammers can copy familiar branding and make phone numbers or messages appear more convincing.
Careful: Never let an unexpected caller guide you through your banking app or ask you to approve a payment to protect your money. End the contact and speak to your bank using a trusted number.
Step 3: Know what to do if a warning appears
A frightening pop-up can make it seem as though you must act at once. In most cases, you can simply stop interacting with the page.
- Do not call the number shown in the warning.
- Do not click its links or download anything it recommends.
- Close the browser tab or window using the normal close control.
- If the page will not close, quit the browser and open it again. Do not follow instructions displayed by the warning.
- If you are still concerned, run a security check using the protection already installed on your device.
If you need help, contact the computer or software company through its official website or an account document you already trust. Do not use the phone number or link supplied by the suspicious message.
Tip: If you are unsure whether a warning is genuine, pause and ask someone you trust before doing anything. A legitimate problem can wait while you check it safely.
Step 4: Get technical help safely
There are genuine computer repair services and remote support tools. The important difference is how the contact begins and whether you can independently confirm who you are dealing with.
- Start from the official website of the computer, software, or internet provider.
- Find its support page yourself rather than using a number in an advert or pop-up.
- If you call a company, use contact details from its official website, paperwork, or an account you already know is genuine.
- Explain the problem and ask what support options are available.
- Do not share passwords or banking security codes with a support person.
If you are considering a local repair service, ask someone you trust for a recommendation. Check the business details independently before handing over your computer or paying for a repair.
Step 5: Act quickly if you have already shared access or information
If you have spoken to a suspected scammer, do not feel embarrassed. These schemes are designed to sound convincing. Taking a few sensible steps can help limit further problems.
If you allowed remote access:
- End the call or online conversation.
- Disconnect the affected computer from the internet.
- Use a different, trusted device to contact your bank if you opened banking or payment accounts while the other person had access.
- Arrange help from a trusted computer professional or the device maker’s official support service. Ask them to check the computer and remove any unwanted remote access tools or software.
- Change important passwords from a device you believe is safe, starting with your email and financial accounts. Do not reuse the old password.
If you shared a password or personal details:
- Change the affected password using the genuine website or app.
- Change it anywhere else you reused it.
- Turn on two-step verification where it is available. This adds another identity check when you sign in.
- Watch for unfamiliar sign-in alerts or transactions.
If you paid or shared bank details:
- Contact your bank or card provider immediately using the number on your card or its official app.
- Explain what happened and ask what steps they recommend to protect the account and challenge any payment.
- Keep messages, emails, receipts, and other records related to the incident.
- Report the scam to the appropriate service in your country.
Step 6: Report the scam in the US or UK
Reporting can help authorities identify patterns and warn others. You can report an attempt even if you did not lose money.
- In the United States: Report tech support scams to the Federal Trade Commission at ReportFraud.ftc.gov. If you believe your computer or accounts have been compromised, contact your bank and consider reporting the incident to the appropriate law enforcement agency.
- In England, Wales, and Northern Ireland: Use the UK’s Report Fraud service to report fraud or suspicious contact. Report Fraud replaced Action Fraud in December 2025.
- In Scotland: Contact Police Scotland on 101 to report fraud or cybercrime.
- For a suspicious UK website: You can also use the reporting guidance on the GOV.UK website.
If someone contacts you again claiming they can recover money lost to a previous scam, be cautious. So-called recovery scams target people who have already been affected and may ask for another payment or more personal information.
Troubleshooting: Common questions about tech support
Can Microsoft or Apple call me about a virus?
Be very cautious of an unexpected call claiming that a company has detected a problem with your computer. Do not give the caller access or personal details. End the call and contact the company through its official support channels if you need to check.
What if the pop-up looks like it comes from Windows or Apple?
Scammers can copy logos and familiar designs. A warning that tells you to call a phone number is a major warning sign. Do not rely on the appearance of the message to decide whether it is genuine.
Is remote access software always a scam?
No. Remote access has legitimate uses when you arrange support with a service you trust. The risk is allowing access because an unexpected caller or pop-up tells you to do so.
What if I only called the number but did not pay or install anything?
End the call and do not continue the conversation. Be alert for follow-up calls or messages. If you shared personal information, contact the relevant company or bank using trusted contact details.
Stay calm and stay in control
A genuine computer problem does not require you to make a rushed decision or obey an unexpected caller. Ignore alarming pop-ups, verify support contacts independently, and never hand over passwords, payment details, or remote access because someone pressures you. If something feels wrong, stop and ask a trusted person for help.
