The Complete Guide to Recognizing and Avoiding Tech Support Scams

The Size of the Problem

The Federal Trade Commission (FTC) receives tens of thousands of reports about tech support scams every year, and those are just the people who report it. The actual number of victims is far higher. These scams steal more than money — they steal confidence. Victims often describe feeling violated, foolish, and reluctant to use their computer afterward. The emotional toll is real, and it's part of why we're covering this topic in such depth.

Here is the most important thing you will read in this article: Falling for a tech support scam does not mean you are gullible, careless, or technologically incompetent. These scams are professionally designed by criminals who run them as full-time businesses. They use sophisticated psychological techniques studied and refined over years. The people behind these operations are skilled manipulators. Being targeted says nothing about your intelligence — it says everything about theirs.

With that established, let's learn exactly how these scams work and how to defeat them.

The Golden Rule: A Single Principle That Defeats Every Variation

Before we get into the details, memorize this rule. It stops every version of every tech support scam:

No legitimate technology company — not Microsoft, not Apple, not Google, not Dell, not HP, not your internet provider — will ever initiate contact with you to tell you there's a problem with your computer or your account.

Never. Not by phone. Not by email. Not by text message. Not by a pop-up in your web browser.

These companies have no way of knowing what's happening on your personal computer unless you contact them first and explicitly give them permission to look. The technology simply doesn't work that way. Microsoft cannot "detect" viruses on your computer from their headquarters. Apple cannot "see" that your iCloud account has been compromised unless you've reported it to them. Your internet provider cannot "monitor" your individual computer for security threats.

If someone contacts you claiming otherwise, they are lying. Period. End of story.

Variation 1: The Cold Call

How It Works

Your phone rings. The caller ID might say "Microsoft," "Apple Support," "Windows Service Center," or even a local area code. The person on the line speaks with confidence and authority. They tell you they're from Microsoft or Apple or your internet provider, and they've "detected" that your computer is infected with viruses, sending out spam, or has been hacked.

They use technical-sounding words — "malware," "Trojan," "security breach," "network intrusion" — to sound legitimate. They often know your name (easily obtained from public records or purchased from data brokers). They may reference your internet provider by name, which anyone can guess from your area code and a quick search.

They will insist the problem is urgent. They say your personal information is at risk, or that your computer will stop working, or that hackers are actively stealing your files. The urgency is a deliberate tactic: panicked people don't think critically.

What They Want

They will guide you to a website that lets them connect to your computer remotely. (The tools themselves are legitimate — companies use them for real remote tech support — but the person on the other end is a criminal.) Once connected, they will:

• Show you harmless system logs and claim they're evidence of infections. Every computer has error logs — they're normal, like your car's maintenance records. The scammer scrolls through them and interprets every line as a "critical warning."
• Run a harmless command that displays something alarming-looking and claim it proves your system is compromised.
• "Diagnose" a serious problem and offer to fix it for a fee — typically $200 to $500, sometimes more.
• Ask for payment via gift cards, wire transfer, or credit card — methods that are hard to reverse.
• While "fixing" the problem, they may install actual malicious software, steal files, or harvest passwords.

The Defense

Hang up. You do not owe a polite explanation to a criminal. Just hang up.

If you're worried enough to want reassurance, write down what the caller claimed, then independently look up the real support number for the company they pretended to represent. Call that number yourself. Describe what happened. A real support agent will confirm it was a scam. Five minutes of verification is worth far more than the alternative.

Variation 2: The Browser Pop-Up

How It Works

You're browsing the web — reading an article, checking news, searching for something — and suddenly your screen fills with a warning. It has an official-looking logo. It might resemble a Windows error message or an Apple security alert. The text says something like:

"WARNING: Your computer is infected with 5 viruses! Your personal and financial information is at risk. Call Microsoft Support immediately at 1-800-XXX-XXXX. DO NOT RESTART YOUR COMPUTER."

A robotic voice might start speaking from your speakers, repeating the warning. The page may even appear to have frozen your browser, making it hard to close.

Sometimes, the pop-up includes surprisingly specific technical information — your IP address (a number that identifies your internet connection, like a return address on an envelope), your general location, your browser type. This information is publicly visible to every website you visit. It's not proof that you've been hacked; it's the digital equivalent of someone reading your return address off the envelope you mailed them.

What's Actually Happening

The "warning" is just a webpage. Nothing more. It's no more official than a flyer stuck under your windshield wiper. The page was designed to look like a system alert, but it has no access to your computer and cannot detect anything about it. Your computer is fine.

The page may use tricks to make it hard to close — looping alert dialogs, full-screen mode, disabling the close button. These are browser tricks, not actual system functions. They're annoying but harmless.

The Defense

Step one: Do not call the number. The people on the other end are criminals operating overseas call centers. They will follow the exact playbook described in Variation 1.

Step two: Close the browser. Here's how, depending on the situation:

• If the browser responds normally: Click the X in the corner or press Alt+F4 on Windows, Command+Q on Mac.
• If the close button doesn't work: Right-click the browser icon in the taskbar (Windows) or the Dock (Mac) and select "Close Window" or "Quit."
• If nothing works: Restart your computer. Press and hold the power button for 10 seconds if necessary — it's a last resort, but it's safe to do when a malicious page won't let go.

Step three: When you reopen your browser, don't restore the previous session. The browser may ask "Reopen closed tabs?" Say no. The offending page will stay closed.

Step four (optional but smart): Clear your browser's cache and cookies for the past hour. This removes any tracking data the scam page may have set. In Chrome, go to Settings > Privacy and Security > Clear browsing data. In Safari, go to History > Clear History (choose "the last hour"). In Firefox and Edge, the process is similar under Settings > Privacy.

Variation 3: The Phishing Email

How It Works

You receive an email that appears to be from Microsoft, Apple, Norton, McAfee, or another well-known tech company. The subject line says something like:

• "Your Microsoft Account Has Been Suspended"
• "Unusual Sign-In Activity on Your Apple ID"
• "Your Subscription Renewal: $499.99 Charged to Your Account"
• "Security Alert: Password Change Required"

The email body looks professional — company logos, official-sounding language, even fake case numbers. It tells you to click a link to resolve the issue, verify your account, or cancel a charge you didn't authorize.

That link does not go to the real company's website. It goes to a convincing fake — a website designed to look identical to Microsoft's login page or Apple's account portal. When you enter your username and password, you're handing them directly to criminals.

The Defense

Never click links in unsolicited emails about your accounts. Instead, open your web browser and type the company's web address yourself — microsoft.com, apple.com, or whatever the real address is. Log in normally. If there's genuinely a problem, you'll see a notification inside your account.

Check the sender's actual email address. Tap or click on the sender's name to reveal the full address. It might say "Microsoft Support" as the display name, but the actual address will be something like "microsoft-support@xz93random.net." Real companies send from their own domain — @microsoft.com, @apple.com, @google.com, etc.

Look for the unprofessional tells. Real companies have professional copywriters. Scam emails often contain awkward phrasing, grammatical errors, weird capitalization, or urgent threats that legitimate companies don't use ("You must act within 24 hours or your account will be permanently deleted!").

Variation 4: The Refund Scam (The Double Play)

This variation is especially cruel because it targets people who have already been victimized — or claims to.

How It Works

You receive a call or email claiming to be from a company that previously sold you tech support services. They say the company has gone out of business, been acquired, or is issuing refunds to past customers. They have your name, your phone number, and possibly details of a previous transaction — because you really did pay a tech support scammer in the past.

They offer to refund your money. They walk you through logging into your bank account or payment service. They ask you to confirm your account balance. Then they use a trick:

They tell you they've refunded too much — "We were supposed to send $300 but accidentally sent $3,000." They ask you to return the difference. They may even manipulate what you see on your screen, briefly moving money between your own accounts to make it look like a deposit was made. You send them the "overpayment," and only later discover that no refund was ever processed — you just sent them more money.

The Defense

Real refunds from real companies appear as credits on your credit card statement or as deposits in your bank account. They do not require you to log in with the caller, share your screen, or send money back to "correct" an overpayment error. If someone contacts you about a refund, hang up and check your account yourself. If no credit appears within a few business days, there is no refund.

Variation 5: The "Your Subscription Is Expiring" Scam

This is one of the fastest-growing variations because it exploits a common situation: people have legitimate subscriptions they've forgotten about or aren't sure about.

How It Works

You receive an email that looks like a renewal notice: "Your Norton 360 subscription will renew today for $349.99. If you did not authorize this charge, call 1-800-XXX-XXXX within 24 hours to cancel."

The amount is deliberately alarming. The deadline is deliberately short. Both are designed to make you call the number without thinking. The person who answers will pretend to help you cancel, but will instead guide you through the same remote-access scam described in Variation 1 — or collect your credit card information to "verify your identity" before canceling.

The Defense

Check your actual accounts. Log into the website of the company named in the email (by typing the address yourself, not clicking the link) and check your subscription status. If you don't have a subscription with them at all, the email is a scam — delete it. If you do have a subscription, the real renewal date and price will be shown in your account, and you can manage it from there.

What to Do If You've Been Scammed

If you recognize yourself in any of the scenarios above and believe you may have been victimized, take these steps immediately, in this order:

1. Contact Your Bank or Credit Card Company

If you paid the scammer — by credit card, debit card, gift card, or wire transfer — call your financial institution right now. Credit card companies can often reverse fraudulent charges if reported promptly. Debit card reversals are harder but possible. Gift cards are usually unrecoverable, but you should still report the fraud: the gift card company may flag the card, and law enforcement tracks these patterns.

2. Disconnect Your Computer From the Internet

If you gave the scammer remote access to your computer, unplug the network cable or turn off Wi-Fi on that device. This prevents them from reconnecting. If you're not sure how, simply shut the computer down entirely.

3. Change Your Passwords — From a Different Device

If the scammer had access to your computer screen, assume they saw any passwords you typed or that were saved in your browser. Using a different device (your phone, a tablet, a family member's computer), change the passwords for: your email account (most critical), your bank and financial accounts, your shopping accounts with saved payment methods, and any other account you accessed while the scammer was connected.

4. Run a Security Scan

Once your passwords are changed, turn your computer back on (still disconnected from the internet) and run a full scan with your antivirus or security software. Windows has a built-in tool called Windows Security; Macs have built-in protections as well. Run a full scan — not a quick scan. If you don't have security software installed, now is the time.

5. Report the Scam

File a report with the Federal Trade Commission at ReportFraud.ftc.gov. Also report it to your local police — they may not be able to recover your money, but the report helps establish patterns that federal investigators use to prioritize cases. If the scammer impersonated a specific company (Microsoft, Apple, etc.), report it to that company's fraud department as well.

6. Be Kind to Yourself

This is not a throwaway line. Shame and self-blame are among the most damaging consequences of these scams. Scammers are professionals who do this all day, every day. They know exactly which emotional buttons to push. They target intelligent, capable people precisely because those people trust their own judgment — and the scammers exploit that trust.

Talk to someone you trust about what happened. You'll almost certainly discover that they or someone they know has had a similar experience. You are far from alone.

Why These Scams Keep Working

You might wonder: if everyone knows about these scams, why do they persist? The answer is that not everyone knows — and the scam industry is constantly evolving.

Scammers operate from countries where law enforcement cooperation is limited. They run organized operations with shift schedules, training materials, and performance metrics. They buy and sell lists of potential victims — people who have responded to spam emails, purchased from dubious websites, or fallen for previous scams. (This is why victims of one scam are often targeted for additional scams.)

They also adapt. When a particular script stops working, they refine it. When one variation gets public attention, they invent another. This is why there's no permanent solution — only permanent vigilance and education.

Share This Knowledge

The single most effective thing you can do to fight these scams is to talk about them. Tell your spouse. Tell your siblings. Tell your neighbors, your bridge club, your church group, your golf buddies. Send them a link to this article.

Every person who reads this guide before receiving a scam call is a person the scammer fails to victimize. Every conversation about these tactics makes the entire community harder to exploit.

Technology should enhance your life, not make you feel vulnerable. Understanding these scams is the first step toward confidence — not the kind that comes from knowing every technical detail, but the kind that comes from knowing you can spot a threat and handle it calmly. That's the confidence we want every Coztech reader to have.