Your computer suddenly displays a scary warning: “WARNING: Your Device Is Infected!” A pop-up flashes red text about malware, urging you to call a support number immediately. Your heart races. You grab your phone and dial the number. But what you’re about to do could compromise your entire digital life.
Tech support scams are among the most effective cybercriminal schemes operating today. They combine psychological manipulation, a sense of urgency, and deceptive tactics to extract money and access to your devices. Unlike many cyberattacks that require sophisticated technical skills, tech support scams prey on fear and trust—and they’re surprisingly successful. Understanding how these scams work and knowing how to protect yourself is essential for anyone using a computer or smartphone.
How Tech Support Scams Work
Tech support scams typically start with a deceptive pop-up or call claiming your device is infected with malware, has compromised security, or faces some other critical problem. The scammer’s goal is to convince you to contact them, either by calling a phone number displayed on the pop-up or by allowing them remote access to your device.
Here’s the typical sequence: A pop-up appears on your screen displaying alarming messages like “Your system has been infected with dangerous spyware,” “Your passwords have been stolen,” or “Your device will be locked in 10 minutes unless you call now.” These messages often look remarkably authentic, mimicking official warnings from Windows, Apple, or your antivirus software. Many include legitimate-sounding phone numbers.
When you call the number, a “support agent” answers. They sound professional. They have a script. They ask you to describe the problem (which they planted), and they validate your fears. “Yes, we’ve been seeing this virus everywhere,” they might say. “You’re lucky you called before it locked your device.” They’ll then ask for remote access to your computer using software like TeamViewer, AnyDesk, or Chrome Remote Desktop.
Once they have access, they might “show” you evidence of infection by opening system logs and explaining technical jargon you don’t understand. “See all these errors?” they’ll ask, pointing to normal system processes. To “fix” the problem, they ask you to install antivirus software (often itself malicious), and most importantly, they ask for payment—sometimes hundreds or thousands of dollars.
But here’s what actually happens: they don’t fix anything. Instead, they install malware that gives them ongoing access to your device. They capture keystrokes to steal passwords. They access your banking information. They take screenshots of sensitive data. And they often call back weeks later claiming to have discovered “new threats” that need more expensive fixes.
Why These Scams Are So Effective
Tech support scams succeed because they understand human psychology. First, they create urgency and fear. A flashing red warning that says your device will lock in 10 minutes triggers panic. Fear bypasses rational thinking. When you’re scared your data is being stolen, you’re less likely to question what someone claiming to help is telling you.
Second, they exploit technical trust. Most people don’t fully understand how their devices work. When someone speaks technical language and points to system logs, it feels credible. The scammer doesn’t need to actually prove there’s a problem—they just need you to believe there could be one.
Third, they use authority and legitimacy. The pop-up looks official. The phone number sounds legitimate. The person on the phone claims to be from Microsoft, Apple, or a major antivirus company. People trust authority figures and established companies.
Finally, they’ve learned that many people find it difficult to admit they’ve been fooled. Once you’ve given them remote access and paid money, admitting the mistake feels embarrassing. So victims often don’t report the scam, which keeps it going.
Recognizing the Red Flags
There are several unmistakable signs that a “tech support” contact is a scam:
Unsolicited contact is a massive red flag. Microsoft, Apple, and legitimate antivirus companies do not call you unsolicited to warn about problems. They don’t send pop-ups with phone numbers. If you didn’t contact them first, the contact is almost certainly a scam.
Requests for remote access are a second warning. Real support will either fix problems over the phone through guided steps, or they’ll ask you to bring your device to an authorized service center. They won’t ask a stranger on the phone to remotely access your computer, and neither should you.
Requests for immediate payment are another indicator. Pop-ups demanding payment right now, or “support agents” insisting you pay before they can help, are scamming you. Legitimate companies process support through established payment channels after problems are fixed.
Poor grammar or spelling in the pop-up message often signals a scam. Most major tech companies have professional marketing teams. Badly written warnings are a red flag, though some scammers have gotten better at this.
Protecting Yourself from Tech Support Scams
The best defense is skepticism. If you didn’t initiate contact, don’t trust it. Here’s a practical action plan:
Never call a number from a pop-up warning. This is the single most important rule. If you see an alarming message, close your browser immediately. Don’t call the number. Don’t click anything on the pop-up. Force-close your browser if necessary. If the message persists or locks your screen, restart your computer.
Verify independently if you’re concerned. If you genuinely worry your device might have a problem, don’t call the number from the pop-up. Instead, open your device’s official settings or visit the official website of the company being impersonated. Look up their real support number and call that. This simple step eliminates virtually all tech support scams.
Enable your browser’s anti-phishing protection. Modern browsers (Chrome, Firefox, Safari) can warn you about deceptive websites. Keep your browser updated and enable these protections. You can also follow our complete guide on how to recognize and avoid phishing attacks for more detailed strategies.
Install legitimate security software from official sources only. Don’t download “antivirus” from pop-ups or dubious websites. Download directly from the publisher’s official site or your device’s official app store. And never install anything a “support agent” tells you to install unless you independently verified that person works for that company.
Keep your device updated. Regular operating system and software updates patch security vulnerabilities that attackers exploit. Enable automatic updates when possible.
Educate family members, especially older adults. Scammers deliberately target older people and those less familiar with technology. Have conversations with parents, grandparents, and other family members about these scams. Explain the red flags and make a pact: if they see a scary warning, they’ll call you before calling any number on the screen.
If You’ve Already Been Scammed
If you gave remote access to a scammer, act immediately. Change all your passwords from a different device. Contact your banks and credit card companies. Run a malware scan using legitimate security software. Consider putting a fraud alert on your credit reports. If you sent money, contact your bank and law enforcement.
Learn more about protecting your devices from malware in our article on antivirus and malware protection.
Staying Safe in an Increasingly Deceptive Digital World
Tech support scams work because they’re genuinely persuasive. They’ve been refined through thousands of successful attempts. But they all share a fatal weakness: they require you to take action based on trust. When you remember that legitimate companies never contact you unsolicited about device problems, you’ve already won most of the battle.
Your best defense is a combination of skepticism and verification. Doubt unsolicited warnings. Verify through official channels before taking action. Never grant remote access to someone who contacted you first. And remember: if something feels urgent on the screen but legitimate companies never act that way, it’s probably a scam.
For additional security practices, explore our guide on protecting your personal information from data breaches to understand the broader context of digital safety.
