Fake Microsoft tech support: the call or pop-up saying your computer "has a virus"

Fake Microsoft tech support: the call or pop-up saying your computer "has a virus"

"Hello, I'm calling from Microsoft Windows support. We've detected that your computer is sending out viruses." Or a screen suddenly fills with red warnings, a loud alarm, and a message: "Your computer is locked. Call Microsoft Support at this number." Both are the opening of the tech support scam, one of the most reported phone scams in the United States. Microsoft, Apple, and your internet provider don't call you out of the blue about viruses, and real security warnings never include a phone number to call.

How does the fake technician scam work?

There are two ways in:

• The cold call. Someone with a foreign or very polished accent says they're from Microsoft, Windows, Apple, Amazon, your bank's "fraud department," or your internet provider. They claim your computer has a virus, has been hacked, or your license has expired.
• The pop-up. While browsing, a page takes over the screen with alarms and warnings that look like Windows or Apple messages, with a "support" number to call. It's a website, not a real infection, and closing the browser usually makes it go away.

From there, the script follows a pattern:

1. They "prove" the problem. They guide you to open system tools that show normal warnings or logs and tell you those are signs of infection.
2. They ask for remote access. They have you install a legitimate program such as AnyDesk, TeamViewer, or Quick Assist and read them the access code. From that moment, they control your computer.
3. They charge you. For a "repair," a "security license," or a "support plan," paid by card, gift cards, wire transfer, or crypto.
4. They go further. With access to your screen, they can see you log in to your bank. In the "phantom hacker" version described by the FBI, they then pass you to a fake "bank" or "government" agent who tells you your savings are at risk and must be moved to a "safe" account, which belongs to the scammers.

What are the warning signs?

• An unsolicited call about a problem with your computer.
• A pop-up with a phone number, an alarm sound, or a "do not shut down your computer" warning.
• A request to install remote access software or to read out a code.
• Payment by gift cards, crypto, wire transfer, or a cash courier.
• Urgency and fear: "your bank account is being hacked right now," "your identity has been stolen."
• They ask you to log in to your bank while they're connected, or to keep the call secret from your bank.

What do I do if they are calling me right now?

1. Hang up. You don't need to argue or explain anything.
2. Don't install anything or read any code they give you.
3. If you see a pop-up, don't call the number. Close the browser (on Windows, Ctrl+Alt+Delete and Task Manager if it's blocked; on a Mac, Force Quit) and reopen it without restoring the previous tabs.
4. If you want to check your computer, use the antivirus you already have or contact the store where you bought it, a trusted technician, or the company's official support page that you look up yourself.

What if I already gave them access to my computer?

Act in this order:

1. Disconnect the computer from the internet (Wi-Fi off or network cable out) to cut their access.
2. Uninstall the remote access program they had you install.
3. Call your bank using the number on the back of your card, explain what happened, and ask them to watch or block your accounts. Do this even if you don't think they saw anything.
4. Change your passwords from a different, clean device, starting with email and banking, and turn on two-step verification.
5. Have the computer checked with a full antivirus scan or by a trusted technician. If in doubt, back up your files and reinstall the system.
6. If you paid by card, ask your card issuer to dispute the charge. If you paid with gift cards, contact the company that issued them right away.
7. If they had personal information (Social Security number, ID), visit IdentityTheft.gov for a recovery plan.

How do I report it?

• To the FBI's Internet Crime Complaint Center (IC3), which tracks these schemes; its alert on tech support scams and its warning on "phantom hacker" scams explain the latest variants.
• To the FTC at ReportFraud.ftc.gov.
• To your local police if you lost money or someone came to your home to collect cash.
• In the NoCall spam numbers directory, with the number that called you or the one on the pop-up.

How do I protect myself next time?

• Remember the rule: tech companies don't call you about viruses, and real warnings don't come with a phone number.
• Keep your system and browser up to date and use a reputable antivirus.
• Never give remote access to anyone who contacted you first.
• Talk about it with older relatives, who are the most frequent target.

Frequently asked questions

Does Microsoft ever call customers? Not to warn them about viruses or errors on their computer. If you contacted Microsoft support yourself, they may call you back about that case, but that's a conversation you started.

I only let them in for a few minutes. Is that enough to cause damage? It can be. In a few minutes they can install other programs or see what's on screen. Follow the steps above anyway.

They gave me a refund but sent too much and asked me to return the difference. What's going on? That's the "refund scam": the "overpayment" is fake, usually money moved between your own accounts, and what you send back is real money. Hang up and call your bank.

In short

A call or a pop-up about a virus is the hook; remote access and payment are the goal. Hang up, don't install anything, and never call a number that appears in a warning. If you already let them in, disconnect, call your bank, and change your passwords from another device. And report the number in NoCall so others recognize it.