Tech Support Scam: Pop-Ups, Remote Access, and Fake Repairs

Quick answer: do not call the number on the warning

A tech support scam is a pitch that your computer or phone is infected, expired, or under attack, followed by a push for remote access and money. The FTC's tech-support article says these scammers want financial information or remote access, and that the goal is money or identity theft. Two rules from that guidance are enough to stop most versions: legitimate tech companies do not contact you by phone, email, or text to say there is a problem with your computer, and real security pop-ups never ask you to call a phone number.

If a window says "call now or your files will be deleted," you are looking at the scam, not at a diagnosis. Close it. Do not read the number aloud into your phone.

Lookup Plainly is not a repair desk. A phone lookup will not debug a PC.

Three doors, one script

The pop-up. It may imitate a blue error screen, an antivirus brand, or a browser alert. It often plays a sound and refuses to close until you panic. The FTC's infographic notes that the warning sits in the browser and urges an immediate toll-free call. Force-quit the browser. On a phone, close the tab. Do not download the "support tool" the page offers.

The inbound call or text. Someone claims to be from Microsoft, Apple, Google, or "your internet provider's security team." You did not ask for the call. Hang up. Phone scam warning signs lists the pressure tactics that show up here too: urgency, a specific payment method, and a refusal to let you call back later through a number you choose.

The search ad. You actually need help, you search "customer support," and the first result is an ad with a phone number the advertiser bought. The FTC warns that scammers place those ads and pages. Use the support link inside the product you already installed, or the contact page you reach by typing the company's domain. Do not use the number printed on a pop-up even if a search ad repeats it.

A fourth variant pretends to be a retailer help desk or a renewal for a security subscription you may or may not have. The test is the same. You start the contact from a known account page. They do not get remote control because a stranger said so.

What happens after you call

FTC descriptions of the call are consistent. The caller asks for remote-access software, pretends to run a scan, points at ordinary log files or a system folder, and names a virus. Then they price a cleanup, a new subscription, or a "refund" that requires you to stay on the line. Payment requests tilt toward gift cards, wires, cryptocurrency, bank transfer, or a payment app because those are hard to reverse.

Remote access is the dangerous moment, not the scary word "virus." Anyone who can move your mouse can open email, password managers, and bank sites if those sessions are unlocked. Do not install the tool "just to let them show you." A trustworthy technician you hired can still work remotely later, through a tool you chose and a number you dialed.

Caller ID does not fix this. Caller ID spoofing explains why a famous name can sit on a fraudulent call. Spam call lookup may add complaint context after you hang up. It cannot certify employment at a software company.

How this scam differs from nearby scripts

If they already pushed you toward gift cards, the brand on the caller ID is less important than stopping payment. Tell the card issuer or the gift-card company using a number from the card, not from the caller.

If the computer is actually slow

Slowness is not proof of the pop-up's story. A calmer sequence:

1. Close the browser with a task manager or a force-quit if the page traps you. On Windows, Ctrl+Shift+Esc opens Task Manager. On a Mac, force-quit the browser from the Apple menu. Do not call the number while you do this.
2. Restart. See whether the warning was only a browser tab.
3. Update the security software you installed on purpose, then run a scan.
4. If you still want a human, use a local shop you can walk into or a vendor contact from an official site you typed.
5. Ignore a second pop-up that appears because the first one told the browser to allow notifications. Revoke notification permission for sites you do not recognize.

Free vendor tools exist for some operating systems. Download them from the vendor's own domain after you are out of the scare page. A file named "Microsoft-fix.exe" from the pop-up is not that download.

If you already connected or paid

Work in this order:

1. Disconnect the computer from Wi-Fi and unplug ethernet. If they are still in a remote session, that cuts it.
2. If you shared a password, change it from a different phone or computer, starting with email and banking. If that password was reused, change those accounts too.
3. Remove remote-access programs you did not mean to keep. If you are unsure, a technician you know can do this. Do not hire the same caller to "undo" the session.
4. If a card or bank account was used, call the number on the card or statement. Ask for a dispute or a fraud claim. Gift cards are harder. Contact the brand on the card using the number printed on the packaging or the brand's site.
5. Report the story at ReportFraud.ftc.gov. Include the phone number they gave you. How to report spam calls explains what a report can and cannot do. The FTC says reports help cases. They do not instantly refund you.
6. If they stored financial details or you see new accounts, consider a credit freeze at the bureaus and a plan at IdentityTheft.gov. The freeze does not remove software from the PC. It is a separate financial step.

FCC unwanted-call guidance still applies if the problem is a robocall wave rather than one pop-up. Blocking the number on your phone helps only that presented number. Spoofed calls rotate.

Search ads and "official" phone numbers

Companies do publish support numbers. The failure mode is grabbing the number from the wrong surface. Prefer:

• the Help menu inside the signed-in product
• a domain you typed, such as the vendor's own support host
• an invoice or box you already own

Avoid:

• numbers inside unsolicited warnings
• numbers from a text you did not request
• the top sponsored result when you are scared and searching "call support now"

If a relative is on the phone with "Apple" while a pop-up is full screen, the useful sentence is "hang up, I will come look." Argument about whether Apple ever calls anyone can wait. The FTC's advice to tell someone you trust is practical because the script is built to isolate the victim.

What a lookup will not add

Afterward you may want to search the phone number. Fine as a note for the FTC report. Not fine as a reason to call back, to accuse a stranger whose number was spoofed, or to decide the computer is clean because the lookup was empty. Empty listings are normal for VoIP pools. A business listing can be a real company unrelated to the person who called, or a lookalike name.

Do not install a "lookup tool" from the same pop-up that scared you.

Related guides

• Phone scam warning signs
• IRS impostor scam
• Caller ID spoofing
• How to report spam calls
• Spam call lookup
• Credit freeze

The phone widget does not identify a technician and does not scan a computer.

Situation table

Bottom line

Do not call numbers painted on warnings, do not hand over the mouse, and do not pay with a gift card. If the computer needs help, start from a vendor page or a person you already trust. If money or passwords already moved, cut the session, call the bank, and report the scam. The logo on the pop-up is scenery.