Tech support pop-up scams
Tech support scammers display alarming fake virus warnings that prompt victims to call a phone number, where they are pressured to grant remote access and pay via gift cards or wire transfers. The FBI IC3 received 36,000 complaints in 2024 with significant losses among older adults.
What we know
Tech support scams operate through multiple channels. Web-based pop-ups use browser features to display full-screen fake error messages resembling Windows or Mac security alerts, complete with fake phone numbers and countdown timers. Some play alarming audio warnings. The messages claim the computer is infected with viruses or that Microsoft has detected suspicious activity and that the user must call a toll-free number immediately.
When victims call, a person who claims to be a Microsoft, Apple, or antivirus company technician answers and guides them through opening diagnostic tools (like Event Viewer or Command Prompt) that show normal system logs that appear alarming to non-technical users. The scammer then requests remote access to 'fix' the problem using legitimate remote desktop software. Once connected, they may actually install malware, steal files or saved passwords, or pretend to clean the infection while demanding payment.
Payment is demanded via gift cards, wire transfers, or cryptocurrency - methods that are irreversible and difficult to trace. Scammers commonly impersonate Geek Squad, Microsoft, McAfee, and Norton. Microsoft states explicitly: 'We do not make unsolicited calls to tell you there is a problem with your computer.' The FTC rule is: real security warnings never include a phone number to call. The FBI IC3 received 36,002 tech support complaints in 2024, with older adults disproportionately affected.
Common claims
- Microsoft calls you when it detects a problem with your computerFalse - Microsoft does not make unsolicited support calls
- A pop-up with a phone number is a real security alertFalse - legitimate security alerts never include phone numbers
- Giving remote access to a technician is safe if they call youFalse - unsolicited remote access requests are scams