How to Spot a Tech Support Scam

You’re in the middle of using your computer when something suddenly feels off. A warning pops up. A message says your device is at risk. Or your phone rings with someone claiming they’re trying to help fix a problem you didn’t even know you had.

At that moment, it’s not obvious what’s real, and that’s exactly what scammers are counting on.

Here’s how these scams work and how to protect yourself.

How Tech Support Scams Work

Scammers typically make contact in one of three ways:

• A scary pop-up or screen alert that freezes your computer and urges you to call a number
• An unsolicited phone call from someone claiming to be from Microsoft, Apple, or your internet provider
• A phishing email warning you about a virus or account problem

1. Fake Pop-Ups That “Lock” Your Computer 

This is one of the most common tactics. A website displays a full-screen alert that looks like a legitimate security warning—often using familiar logos and language to mimic companies like Microsoft. 

The message might claim your computer is blocked or infected and urge you to call a support number immediately. 

What to look out for:

• Pop-ups that include a phone number (real security alerts don’t) 
• Loud alarm sounds playing on repeat or flashing warning messages
• A countdown timer pressuring you to act immediately
• Spelling mistakes and unprofessional images are a telltale sign. Closely inspect the information displayed in a pop-up. 
• Messages that say your device is “locked” or “compromised” 

‍

What to do: Press Alt+F4 (Windows) or Command+W (Mac) to close the browser. Do NOT call the number. Simply restarting your computer clears the pop-up entirely.

2. Unsolicited Calls from “Tech Support” 

In this version, a scammer calls you directly, claiming to be from a well-known company like Microsoft, Apple, or your internet provider. 

They may say your device is sending error messages or has been hacked. They urge you to act fast or risk losing access to your computer or data. They might ask you to install software or visit a website to allow remote access. 

These numbers typically route internationally to scam call centers rather than any legitimate company operation. 

What to look out for:

• Any unexpected call offering tech support 
• Requests to download software or visit a website 
• Pressure to stay on the phone
• Requests to download AnyDesk, TeamViewer, or similar remote access tools

If you happen to install any software from a scammer, disconnect the internet immediately. Change all passwords. Run a full antivirus scan. Contact your bank if financial info was shared.

3. Fake Emails and Invoices

Some scams start with an email that looks like it’s from a legitimate company—often warning about a charge or subscription you don’t recognize.

The goal is to get you to call a number or click a link.

A very common variant is the fake Geek Squad or Norton renewal invoice — an email claiming you've been auto-charged $299–$499 for a security subscription and to call a number to cancel. 

What to look out for:

• Sender email address doesn't match the real company's domain (e.g., "support@micros0ft-help.com")
• Generic greetings like "Dear Customer" instead of your name
• Urgent language: "Your account will be suspended in 24 hours"
• Invoices for services you never signed up for
• Links that don't match the company's real URL when you hover over them

4. Payment Requests—Especially Gift Cards 

After gaining a victim's trust via any of the above methods, scammers often ask for payment to “fix” the problem.

This is especially prevalent in elder fraud cases. Victims are told the gift cards are needed to "unlock" their computer, pay a fine, or secure their bank account.

What to look out for:

• Any demand for payment via gift cards, wire transfer, or crypto 
• Instructions to read card numbers over the phone 
• Instructions to keep the transaction a secret 
• Requests to send photos of the card's back PIN number

5. Government or Bank Impersonation 

Some scams escalate further, with fraudsters posing as your bank or a government agency and claiming your accounts are at risk or connected to suspicious criminal activity. These calls are designed to create urgency and keep you engaged, making it harder to pause or think clearly. You may be pressured to stay on the line and even to move money to a so-called “safe” account.

What to look out for:

• Caller ID showing "IRS," "Social Security Administration," or "Medicare" — these can be spoofed
• Threats of arrest, deportation, or account suspension unless you act immediately
• Being told your Social Security number has been suspended, frozen, or revoked (it cannot be)
• Requests to move money to a "safe account" — banks and government agencies never do this

Why These Scams Are So Effective

Tech support scams work because they feel urgent and because they often look like you’re solving a problem, not creating one.

Scammers keep you on the phone, create pressure, and isolate you from others who might question what’s happening. By the time money is involved, it can feel like the only logical next step.

A Smarter Layer of Protection

Even when you know what to look for, these scams can be convincing especially when they happen quickly or during a stressful moment.

That’s why tools like Carefull are designed to add an extra layer of protection helping monitor for unusual activity, flag potential risks, and provide guidance when something doesn’t seem right.

Because when it comes to scams, catching it early can make all the difference.

‍