What Is a Tech Support Scam?
A tech support scam is a fraud in which criminals pretend to be the IT or support team of a company you trust — Microsoft, Google, Apple, your internet provider, or even your bank. Their goal is simple: frighten you into believing your device has a problem, then "help" you fix it in a way that gives them your money, your personal information, or remote control of your device.
Here is the typical pattern. You receive a phone call out of the blue: "We detected a virus on your computer." Or you are browsing the web when your whole screen turns red with a flashing warning: "Your device is infected! Call this number immediately!" Or an email warns that your account has been hacked and your subscription is expiring today. Every version follows the same script: create fear, create urgency, then push you to hand over payment, passwords, or access to your device.
These scams succeed because they exploit trust and panic, not technical skill. The caller sounds polite and professional. The pop-up uses the logos of famous companies. The email looks official. But once you understand how the trick works — and memorize a few golden rules — these scams become easy to spot. This guide explains the playbook so you can defend yourself, and pass the knowledge to family members who are most often targeted.
The 3 Most Common Versions
Tech support scams come in three main forms. Knowing each one means none of them can surprise you.
- 1. Cold calls — "Your computer has a virus." A stranger calls and claims to be from a well-known company. They say your device is sending error reports, is infected, or has been hacked. They ask you to follow their instructions on your computer, which leads to installing remote-access software so they can "fix" the problem — while actually planting malware, stealing files, or demanding payment for worthless "repairs."
- 2. Fake virus-warning pop-ups with a phone number. While browsing, a page suddenly takes over your screen with alarming messages — "WARNING! Trojan detected!", "Your data will be deleted in 5 minutes!" — plus a loud alarm sound and a "support" phone number. Your browser may appear locked so you cannot close it. This is just a scary web page, not a real diagnosis. Calling the number connects you to the scammers, not to any real company.
- 3. Phishing emails and texts about hacked accounts or expiring subscriptions. You get an email or SMS saying your account was breached, your antivirus subscription expired, or a large charge is pending — and asking you to click a link, call a number, or reply with your details. The message creates urgency ("act within 24 hours or lose your account") to stop you from thinking clearly. Clicking the link leads to a fake login page designed to steal your password.
Different channels, same playbook: they contact you first, scare you, and demand quick action.
Red Flags: How to Recognize the Trick
Scammers rely on a handful of pressure tactics. Learn these red flags and you will spot the fraud almost immediately:
- They contact YOU first. Real tech companies do not make uninvited calls to tell you about a virus on your computer. They do not send pop-ups with phone numbers. If a "support agent" appears out of nowhere, that is already a scam.
- Manufactured urgency and fear. Countdown timers, flashing red screens, phrases like "immediate action required" or "your account will be deleted today" — all designed to panic you so you do not pause and think. Legitimate companies do not communicate this way.
- They ask you to install remote-access software or grant screen control. The caller tells you to download an app or follow steps that let them see and control your screen. Remote-access tools themselves are legitimate software used by real IT departments — but scammers ABUSE them. Rule of thumb: never install any remote-access tool because a stranger on the phone told you to. The moment a caller asks for screen control, hang up.
- They demand payment by gift cards, crypto, or wire transfer. No real company takes payment in gift cards or cryptocurrency for a "virus removal." Requests for untraceable payment methods are a sure sign of fraud.
- They ask for your passwords or one-time codes. A real support agent will never ask for your password or the verification code sent to your phone. Anyone asking for these is trying to take over your accounts.
Remember: the tools and logos they use are real. The person using them on you is not.
The Golden Rules
Memorize these four rules and you will be safe from nearly every version of this scam:
- Real tech companies never call you uninvited. Microsoft, Google, Apple and your internet provider do not phone you to warn about a virus. Any such call is fake.
- Never call the number in a pop-up — close the browser tab instead. If a scary warning locks your browser, do not interact with it. Close the tab or window; if it refuses to close, restart your device. Nothing will be deleted — the pop-up cannot actually harm your files.
- Hang up and call the company's official number from their real website. If you are worried the problem might be genuine, end the call, open the company's official website yourself (type the address, do not click the suspicious link), and call the support number listed there.
- A real support agent never asks for your password or verification code. If they ask, end the conversation immediately.
When in doubt, do nothing quickly. Scammers need you to act fast. Slowing down breaks their entire strategy.
Already Gave Them Access? Act Fast
If you already followed their instructions — installed their software, let them see your screen, or shared information — stay calm and work through these recovery steps in order:
- Disconnect the device from the internet. Turn off WiFi or unplug the network cable right away. This cuts off the scammer's connection to your device.
- Uninstall any remote-access software they had you install. Go to your installed apps list and remove anything you installed at their request. If you are unsure, a trusted local technician or a knowledgeable family member can help.
- From a CLEAN device, change your passwords. Use a different phone or computer that the scammer never touched. Start with your email and banking passwords — email is the key to resetting everything else. Use strong, unique passwords and turn on multi-factor authentication.
- Contact your bank if you paid. Call your bank's official helpline immediately, explain what happened, and ask them to review and secure your accounts. Report any fraudulent charges.
- Run a full antivirus scan. Update your security software and run a complete system scan to find anything they may have left behind.
- Back up your important files first if needed. Before wiping or making big changes, copy your photos and documents to an external drive so nothing precious is lost.
Acting quickly limits the damage. Every hour you wait gives the scammers more time to misuse what they stole.
Protect Elderly Family Members
Scammers deliberately target seniors. Older people tend to be polite to callers, may be less familiar with how real companies communicate, and are less likely to hang up on a stranger. That politeness is a virtue — the scammers simply exploit it.
Here are practical defenses every family can set up:
- Create a family code word for "emergencies." Agree on a secret word that proves a caller is really a relative. If a "grandchild" or "bank officer" calls with an emergency but does not know the code word, hang up and call the family member directly.
- Agree on a family rule: NOBODY from "support" gets remote access or payments without calling you first. Tell your parents and grandparents: if anyone claims their computer has a problem, the answer is always "my son/daughter handles that — call them."
- Write the golden rules on paper near the computer. A simple note — "1. Nobody calls about viruses. 2. Never call pop-up numbers. 3. Never give passwords." — next to the screen can stop a scam in the moment it happens.
- Talk about it regularly. Scams evolve. A short conversation every few months about the latest tricks keeps the whole family alert. Treat it like fire safety — a habit, not a lecture.
Defending your family is a team effort, and the simplest habits are the strongest ones.
How to Report a Tech Support Scam
Reporting helps protect the next potential victim. Here is what to do:
- Report to your country's cybercrime authority. In Pakistan, for example, you can report to the FIA Cybercrime Wing — Pakistan's federal agency for cybercrime complaints. Wherever you live, search for your country's official cybercrime reporting portal and file a complaint there.
- Also report to the impersonated company. Microsoft, Google and Apple all have fraud-reporting pages. Reporting the scam to them helps them warn others and shut down the fake infrastructure.
- Keep evidence. Save the phone number that called you, take screenshots of the pop-up or email, and note the date, time, and exactly what they asked you to do. Do not delete anything until after you have reported it — investigators use these details to trace the criminals.
- Report the number. Most phone carriers and messaging apps let you report and block scam numbers. One report protects everyone on that network.
Even an unsuccessful attempt is worth reporting. Your report may be the one that helps stop the operation.
Frequently Asked Questions
Can a website really detect a virus on my phone?
No. A web page cannot scan your device for viruses. Those dramatic pop-ups claiming "5 viruses found on your phone!" are pure theater — just an advertising page designed to frighten you into calling a scammer's number or installing a malicious app. Close the tab and ignore it.
I called the number but didn't pay — am I safe?
Most likely yes, as long as you did not install anything or share passwords or codes. But the scammers may now call you back, so block the number and do not call it again. If you did install something or grant access, follow the recovery steps above.
They knew my name — how?
Knowing your name means nothing. Scammers buy leaked contact lists from data breaches, or simply look you up in phone directories. A caller knowing your name is not proof they are legitimate — it only proves they have access to the same public or leaked data as thousands of other scammers.
Is remote-access software itself dangerous?
No — remote-access software is a legitimate tool used by real IT professionals and by people helping their own families. It only becomes dangerous when a scammer tricks you into installing it and granting them control. The danger is not the tool; it is the stranger. Only ever use remote access with someone you personally trust and contacted yourself.
Key Takeaways
- Tech support scams pretend to be trusted companies to steal your money, data, or device access.
- Watch for the three versions: cold calls, scary pop-ups with phone numbers, and phishing emails or texts.
- Red flags: they contact you first, create panic and urgency, demand screen access, ask for gift-card or crypto payments, or request passwords and verification codes.
- The golden rules: real companies never call uninvited; never call pop-up numbers — close the tab; hang up and call the official number; no real agent asks for your password.
- If you already gave access: disconnect, uninstall their software, change passwords from a clean device, call your bank, and scan for malware.
- Protect seniors with a family code word, a no-remote-access rule, and written golden rules by the computer.
- Report every attempt to your cybercrime authority and the impersonated company, and keep your evidence.