On this page
If a pop-up says your computer is infected and tells you to call a number, do not call. If an unexpected caller claims to be technical support, hang up. Open your device's security settings or contact the company through a website or app you already trust.
Tech support scams work by turning a frightening message into a rushed decision. A loud alarm, familiar logo, or convincing caller can make an ordinary browser page feel like an official emergency. Slowing down breaks that pattern.
Recognize the story before it escalates
The scam often begins with a browser warning, an unsolicited call, a search advertisement, or an email about an antivirus renewal. The message claims that hackers, viruses, or a billing mistake require immediate attention. The contact method varies, but the pressure is similar.
After you respond, the scammer may ask you to install remote-access software. They might then show ordinary system logs as evidence of an infection, pretend to run a repair, or claim your bank account is at risk. None of those demonstrations establishes that the person is legitimate.
- Urgency: You must act now or lose files, money, or access.
- Isolation: You are told not to discuss the situation with family or your bank.
- Unusual payments: Gift cards, cryptocurrency, wire transfers, or cash are demanded.
- Account access: You are asked for passwords, verification codes, or access to online banking.
- A “safe account”: Someone tells you to move money supposedly to protect it.
Real remote-support tools also have legitimate uses. The danger is granting control to someone whose identity you have not independently verified. A familiar software name does not make the person operating it trustworthy.
Close a fake warning without interacting
A webpage can display a fake scan, play audio, or enter full-screen mode. It cannot reliably diagnose your entire device merely because you visited it. Avoid clicking its “scan,” “cancel,” or “call support” buttons, since those controls belong to the page itself.
- Stop interacting with the warning and do not call its number.
- Try Escape to leave full-screen mode, then close the tab or browser.
- If the browser will not close, use the operating system's app-management controls.
- Reopen the browser without restoring the suspicious tabs.
- Check security through your actual device settings if you remain concerned.
Windows and Mac
On Windows, press Ctrl + Shift + Esc to open Task Manager, select the browser, and choose End task if necessary. On a Mac, press Option + Command + Esc, select the browser, and choose Force Quit. Unsaved work in that browser may be lost.
If the warning returns as a notification after closing the page, review the browser's notification permissions. In Chrome, start at Settings > Privacy and security > Site settings > Notifications, then remove suspicious permissions. Other browsers offer similar controls under website permissions.
iPhone and Android
Close the suspicious tab using the browser's tab controls. If needed, close the browser from the app switcher and reopen it without returning to that page. Do not install a configuration profile or an app that a warning page says is required.
A page claiming your phone has many viruses is not a trustworthy device scan. If notifications persist, review website notification permissions, unfamiliar apps, and your device's notification settings rather than following the alert's instructions.
Verify support through a separate route
If a caller names a real company you use, end the conversation and contact that company independently. Use the support option inside the official app, a saved bookmark, or contact details from your purchase records. Caller ID can be spoofed.
Avoid assuming the first search result is official support. Search ads and lookalike sites can funnel you to impersonators. Check the domain carefully and do not trust a phone number merely because it appears beside a familiar logo.
For a work computer, contact your own IT department through its established channel. An unexpected person who knows your employer's name is not automatically authorized. If you already opened a remote session, tell IT promptly instead of trying to hide the incident.
Scammers also impersonate fraud teams and send fake renewal messages. The checks in how to spot a phishing email in 30 seconds can help you verify the initial contact before it becomes a phone conversation.
Act quickly if you granted remote access
Disconnect the affected device from Wi-Fi or Ethernet to interrupt a remote session. End the call. Do not stay connected while the caller talks you through an alleged cleanup, refund, or cancellation process.
From a separate trusted device, secure your primary email and any accounts you opened or exposed during the session. Change affected passwords, review recovery details, and sign out other sessions where available. Start with financial accounts if you logged in while someone could see or control the screen.
The Password & Hash Generator can help create unique replacement passwords. Use it on the trusted device, not one that may still be under someone else's control. Save replacements securely and enable two-factor authentication.
Remove the remote-access application and inspect for unfamiliar accounts, extensions, and startup items. Run a full scan with your operating system's security tools or reputable security software. On Windows, begin at Settings > Privacy & security > Windows Security > Virus & threat protection.
A clean scan does not prove the person made no changes or copied no files. If you granted administrator access, cannot explain what changed, or handled sensitive information, seek trusted professional help. A clean operating-system reinstall may be appropriate when you cannot reestablish confidence in the device.
Protect your money and report the incident
Contact your bank or payment provider immediately using its official app or the number on your card. Explain that you were deceived and ask whether a transfer can be stopped or a payment disputed. Recovery is not guaranteed, but quick reporting can matter.
If you paid with gift cards, contact the card issuer and keep the cards and receipts. For cryptocurrency or wire transfers, notify the relevant provider promptly. Do not pay anyone who promises guaranteed recovery for an upfront fee; follow-up recovery scams target previous victims.
Save messages, phone numbers, receipts, transaction details, and a brief timeline without reopening suspicious files. Report the scam at ReportFraud.ftc.gov. If identity information was stolen, use IdentityTheft.gov and consider freezing your credit.
Make the next attempt easier to dismiss
Keep software updated, restrict browser notifications, and agree on a trusted support contact with family members. Nobody should feel embarrassed about asking for a second opinion. A legitimate problem can wait long enough for you to close a page, end a call, and verify who is actually helping.
Reach designers & developers at work
Put your product next to the tools people use every day. One sponsor per placement, no tracking pixels.
Become a sponsor