Few scams are as widespread or as convincing to a worried victim as the tech support scam. It preys on a universal fear — that something is wrong with your computer — and on the natural instinct to trust an authoritative-sounding expert offering to help. Understanding the playbook strips away its power. This guide covers how the scam works, how to recognize it, and what to do if you've already been caught.
How the tech support scam works
The scam comes in two main flavors. In the first, a frightening pop-up appears on your screen claiming your computer is infected, often with blaring alarms and a phone number to call 'support' immediately. In the second, your phone rings and a caller claims to be from a well-known technology company, saying they've detected a problem with your device. Both routes lead to the same place: a 'technician' who wants remote access to your computer.
What the scammer is really after
Once you're on the line, the goal is to get you to install remote-access software or visit a site that grants them control of your machine. From there they'll pretend to find serious problems, then demand payment to fix imaginary issues, steal personal and financial data, or install actual malware. Some lock the victim out and demand a ransom to restore access.
Real technology companies do not cold-call you about viruses, and legitimate error messages never include a phone number to call. Both are hallmarks of the scam.
Warning signs
Tech support scams share recognizable signals:
- An unsolicited call claiming to be from a major tech company about a problem you never reported.
- A pop-up with alarms, countdowns or a phone number urging you to call immediately.
- Pressure to act now, before you can think or ask someone for advice.
- A request to install remote-access software or to grant control of your screen.
- Demands for payment by gift card, wire transfer or cryptocurrency.
What to do when you get the call or pop-up
The response is simple and decisive:
- Hang up on any unsolicited tech support call. Don't argue or engage.
- Don't call the number in a pop-up. Close the browser instead; if it won't close, shut down the device.
- Never install remote-access software at the request of an inbound caller.
- Verify independently by contacting the company through its official website if you're truly worried about your device.
If you've already let them in
Don't panic, but act quickly:
- Disconnect the device from the internet to cut off remote access.
- Uninstall any remote-access software they had you install.
- Run a reputable security scan, or have a trusted local professional check the machine.
- Change passwords for important accounts from a different, clean device.
- Contact your bank if you shared payment details, and watch for fraudulent charges.
- Report the scam to the relevant authorities to help warn others.
Protecting vulnerable family members
Tech support scams hit older and less technical users especially hard. A simple family rule helps enormously: no one installs software or grants computer access because of an unexpected call or pop-up — they call a trusted family member first. That single pause defeats the scam's reliance on urgency and isolation.
The bottom line
The tech support scam runs on fear and false authority, but it has a fatal weakness: legitimate companies never operate this way. They don't cold-call about viruses, and real error messages never tell you to phone a number. Hang up, close the pop-up, never grant remote access to an unsolicited caller, and verify any genuine concern through official channels. Recognize the script and the scam falls apart.
The psychology the scam exploits
Tech support scams are engineered around two powerful feelings: fear that something is seriously wrong with your device, and relief at finding an authoritative expert who can fix it. The frightening pop-up or alarming call creates the fear; the calm, technical-sounding 'support agent' offers the relief. Victims aren't foolish — they're responding naturally to a manufactured crisis and a seemingly helpful rescuer. Recognizing this emotional setup is what lets you resist it.
The structural giveaway, beneath the emotion, is simple and absolute: legitimate technology companies do not cold-call you about viruses, and real error messages never display a phone number to call. Holding onto these two facts cuts through whatever fear the scam generates. No matter how alarming the pop-up or how convincing the caller, the very existence of the call or the number is itself the proof that it's fake.
Protecting the whole household
These scams hit less technical and older users especially hard, so a shared family rule helps everyone: nobody installs software or grants remote computer access because of an unexpected call or pop-up — they pause and check with a trusted family member first. That single pause defeats the scam's reliance on isolation and urgency. Pairing the rule with a quick demonstration of how to close a pop-up or shut down a device makes it actionable rather than abstract.
Recovering after an incident
If a scammer did gain access, act methodically: disconnect from the internet to cut their control, uninstall any remote-access software they had you install, run a reputable security scan or consult a trusted local professional, and change passwords from a separate clean device. If you shared payment details, contact your bank and watch for fraudulent charges. Finally, report the scam to help warn others. Prompt, orderly action limits the damage and restores your security.
The two facts that end the scam
For all its theatrical fear and false authority, the tech support scam is undone by two facts you can hold onto no matter how alarming the pop-up or how convincing the caller: legitimate technology companies never cold-call you about viruses, and genuine error messages never display a phone number to call. The very existence of an unsolicited 'support' call, or a pop-up urging you to phone a number, is itself the proof that it's fake. Remember these two facts and the emotional pressure loses its grip.
From there the response is straightforward: hang up on unsolicited tech support calls, close the pop-up rather than calling its number, never install remote-access software at an inbound caller's request, and verify any real concern through the company's official website. Share a simple household rule so less technical family members are protected too — no software installs or computer access because of an unexpected call or pop-up, without checking with a trusted person first. The scam runs on isolation and urgency, and that pause defeats both.
Key takeaway
Tech support scams use scary pop-ups or cold calls claiming your computer is infected, aiming to gain remote access so they can steal data or demand payment. Real tech companies never cold-call about viruses and legitimate errors never list a phone number. Hang up, close the pop-up, never install remote-access software for an inbound caller, and verify independently.