Tech Support Scam Red Flags and What to Do if You Fell for One

Your screen suddenly turns red, an alarm starts blaring, and a message says your computer is infected and you must call "Microsoft Support" right now. That is a tech support scam, and it is one of the most expensive frauds Americans report. The FBI's Internet Crime Complaint Center logged 36,002 tech support complaints in its 2024 annual report, with reported losses of about $1.46 billion, up from roughly $925 million the year before.

The scam works because it borrows the names of companies you already trust and then rushes you before you can think. This checklist covers the warning signs, how to handle a suspicious call or pop-up in the moment, and exactly what to do if you already paid or let someone into your computer.

Red flags of a tech support scam

Any one of these should make you stop. Two or more together is close to a sure thing.

• A pop-up or alert with a phone number. The FTC says real security warnings never ask you to call a number, and Microsoft says the same about its own error messages.
• A call, text or email you did not ask for from someone saying there is a problem with your computer. Legitimate tech companies do not reach out this way.
• A fake renewal notice for Geek Squad, Norton, McAfee or a similar service, claiming a large charge and telling you to call within 24 hours to cancel it.
• A request for remote access so the "technician" can look at your device.
• A scan that finds dozens of problems on a machine that was working fine a minute ago.
• Payment by gift card, wire transfer, crypto, a payment app or cash. Scammers want money that is hard to trace and almost impossible to pull back.
• A handoff to your "bank" or a "government agent" who says your accounts are hacked and your money must be moved somewhere safe.
• Pressure and secrecy. You are told to act now, stay on the line and not tell anyone, including your bank.
• Requests for passwords or verification codes. Apple says it never asks for your Apple Account password or a verification code to provide support.

The escalating version: the "phantom hacker" scam

The plain version ends with a few hundred dollars for useless "repairs." The bigger version is worse. In a 2023 public service announcement, the FBI described "phantom hacker" scams that run in three phases.

1. A fake tech support agent gets remote access, runs a fake scan and asks you to log in to your bank accounts "to check for hackers." This is how they pick which account to drain.
2. A fake bank employee calls to say a foreign hacker has reached your money and you must move it to a "safe" account, often by wire, cash or crypto.
3. A fake government official, sometimes claiming to be from the Federal Reserve, backs up the story with official looking letters.

The FBI said almost half of the victims reported to it in that period were over 60, and they accounted for 66 percent of the losses. No real agency will ever ask you to move money to protect it.

A step by step checklist for the moment it happens

Keep this handy, or share it with a parent who might get the call.

1. Do not call the number on the screen. Treat it as the scammer's direct line.
2. Close the browser. If the pop-up blocks your mouse, Microsoft suggests pressing ALT+F4 on Windows. If the browser still will not close, restart the computer. On a Mac or iPhone, Apple says to simply close the window or tab and move on.
3. Hang up on unexpected support calls. Caller ID can be faked, so a number that looks like Apple or Microsoft proves nothing.
4. Never install software or grant remote access for someone who contacted you first.
5. Check renewal claims yourself. Look at your card or bank statement for the charge. If you need to reach the company, use a number you find on its official site or on your card, never the one in the message.
6. Contact support on your own terms. Start from the company's real website, such as Apple's support contact page, instead of a search ad. The FTC warns that scammers buy ads to appear at the top of results for "tech support."
7. Pause before paying anyone. Talk to a friend or family member first. Saying the story out loud often exposes it.

If you think something really is wrong with your device, run the security software you already trust. Our guide on removing a virus from a Windows PC walks through the built in tools.

What to do if you already paid or gave access

Move fast. The first hours matter most for getting money back. This list follows the FTC's guidance on tech support scams and its advice for people who were scammed.

If you paid

• Credit or debit card: call the number on the back of the card, report the fraud and ask to reverse the charge.
• Bank transfer or Zelle: call your bank or credit union right away and ask them to reverse it.
• Payment app: report it inside Venmo, Cash App or PayPal and ask for a reversal.
• Gift card: call the number on the back of the card, say a scammer got the card number and PIN, and keep the card and receipt.
• Wire transfer: contact Western Union or MoneyGram, say it was fraud and ask for a refund.
• Crypto: contact the exchange or crypto ATM operator immediately. Recovery is harder because crypto has fewer legal protections.
• Cash by mail: call the U.S. Postal Inspection Service at 1-877-876-2455. It may be able to intercept a package that has not been delivered yet.

If you let them into your computer

• Disconnect from the internet, then update your security software and run a full scan. Delete anything it flags.
• Uninstall any remote access program the caller had you install.
• If you are not comfortable cleaning it up yourself, take it to the manufacturer or a store you already know.

If you shared a password or personal details

• Change that password and any other account that uses the same one. A password manager makes unique passwords far easier to keep.
• Turn on two factor authentication everywhere you can.
• If you gave your Social Security number, follow the steps on IdentityTheft.gov. Our identity theft checklist covers what to do first.

Where to report it

• FTC: ReportFraud.ftc.gov for any tech support scam.
• FBI: ic3.gov for online fraud, especially if you lost money. The FBI also asks victims to contact their local field office.
• Microsoft: microsoft.com/reportascam if the scammer used Microsoft's name.
• Apple: reportphishing@apple.com for fake Apple emails or texts.

Not sure which agency handles your case? Our guide to reporting a scam in the US breaks it down by type.

One last check worth doing today: ask the older people in your life what they would do if their screen froze with a warning and a phone number. If the answer is "call it," send them this page. More security guides live in our tech section.