Fake Microsoft technician: the call saying your computer "has a virus"

Fake Microsoft technician: the call saying your computer "has a virus"

"Hello, I'm calling from Microsoft's technical department. We've detected that your computer is sending errors and has been infected with a virus." The voice sounds professional, often with a call-centre background, and the message is alarming: if you don't act now, you'll lose your files or your bank details will be stolen. It's one of the oldest phone scams around and it's still working, so much so that ComReg lists tech support scam calls among the most common scam calls in Ireland. The key fact is simple: Microsoft doesn't ring you to fix your computer. Nor do Apple, your antivirus company or your broadband provider out of the blue.

How does the fake technician scam work?

The script hardly changes:

1. The unsolicited call. "Microsoft", "Windows support", "your internet provider" (eir, Virgin Media, Vodafone...) or "your antivirus". Sometimes there's a pop-up first: a web page that freezes your browser with a warning and a phone number to call.
2. The fake diagnosis. They ask you to open a system tool (such as the Event Viewer, full of harmless warnings) and present those warnings as proof of infection.
3. The remote access. They ask you to install AnyDesk, TeamViewer, QuickSupport or similar and to read out the access code. From then on, they control your computer.
4. The payoff. Depending on the variant: they charge you for a "licence" or "repair"; they ask you to log into online banking "to check nothing has been stolen" and then move money; or they claim they've "refunded you too much" and ask you to send the difference back.
5. The second round. Weeks later, someone calls offering to "get your money back"... for a fee.

What are the warning signs?

• They call you, without you having asked for anything.
• They know about "problems" with your computer that you hadn't noticed.
• They ask you to install a remote access program or to type commands.
• They want you to log into your bank while they're connected.
• They ask for payment by gift card, crypto or transfer for a "licence" or "service".
• A warning on your screen with a phone number: real security warnings never ask you to ring a number.
• Pressure and fear: "If you hang up, you'll lose everything."

What do I do if they're calling me right now?

1. Hang up. No need to explain or argue. You can't negotiate your way out with a scammer.
2. Don't install anything and don't read out any code shown on your screen.
3. If there's a frozen warning in your browser, close the browser (on Windows, Ctrl + Alt + Del and Task Manager if needed). Don't ring the number that appears.
4. If you're worried about your computer, check it yourself with the antivirus you already have, or take it to a technician you trust.
5. Report the number in the spam numbers directory and, if they keep calling, block it. ComReg's advice sums it up: Stop, Check, Avoid, Mark it as spam.

What if I've already let them into my computer?

Act in this order:

1. Disconnect the computer from the internet (unplug the cable or turn off Wi-Fi). That cuts their access.
2. Uninstall the remote access program they had you install.
3. From another device, change the passwords for your email, online banking and any account you used while they were connected. Start with your email: it's the key to resetting everything else.
4. Ring your bank on the official number if you logged into online banking, paid anything or gave card details. Ask them to check recent transactions, block cards if needed, and watch for unusual payments.
5. Run a full antivirus scan, or have a trusted technician check the computer. If in doubt, back up your documents and reinstall the operating system.
6. Turn on two-step verification on your main accounts.
7. Report it to the Gardaí at your local Garda station, especially if you've lost money. Bring the number, the time, the program you installed and any payment receipts.

How do I report it?

• An Garda Síochána: report it at your local station. Online fraud is handled with the support of the Garda National Cyber Crime Bureau, but the report starts locally.
• Your bank, if there's money or card details involved, always on the number on your card or in its app.
• Your phone provider, if the same number keeps calling you: ask them to block it.
• NoCall: report the number in the spam numbers directory so other users see the warning.

How do I protect myself next time?

• Remember the rule: no big tech company rings you unprompted to fix your computer.
• Don't install remote access programs at the request of someone who called you.
• Keep your operating system and antivirus updated.
• Talk to older relatives about this scam: they're a favourite target.
• Use an app like NoCall to see whether a number has already been reported before you answer.

Frequently asked questions

Can Microsoft really detect a virus on my computer from a distance and ring me? No. Microsoft doesn't monitor your computer to call you about errors. If you need support, you're the one who contacts them through their official website.

They said they were from my broadband company. Is it different? Be just as suspicious. If you have a problem with your line, ring your provider yourself on the number on your bill or in its app.

I paid for a "licence" by card. Can I get the money back? Ring your bank straight away to explain it was a fraud and ask about disputing the charge (a chargeback). The sooner you do it, the better your chances. If the bank refuses and you disagree, you can complain formally and then go to the Financial Services and Pensions Ombudsman (FSPO).

Someone is now offering to get my money back for a fee. Is it legit? No: it's the second round of the same scam. Nobody legitimate charges you upfront to recover money stolen in a fraud.

In short

Microsoft won't ring you, a real warning won't ask you to ring a number, and no technician needs to control your computer because they "detected" something. Hang up, don't install anything, and if you've already let them in, disconnect, change your passwords from another device and ring your bank. Report the number in NoCall's directory to warn others.