TECH
Personal

Tech Support Scams: How to Spot Fake Microsoft & Apple Pop-ups

Fraudsters claim your computer has a virus, your account has been hacked, or your refund went wrong, and demand payment or remote access to 'fix' it.

Why this scam works

Most users can't easily tell whether a security alert is real. Scammers exploit that uncertainty by combining a dramatic warning with a friendly 'helper' to walk you through giving them control.

What's happening now

  • Tech-support scam losses reported to the FBI IC3 reached over $924 million in 2023, with adults 60+ accounting for two-thirds of losses (FBI IC3 2023, IC3 Elder Fraud Report).
  • Many tech-support scams now route victims through a refund-overpayment storyline that ends at a Bitcoin ATM or wire transfer (FTC, FBI).
  • Pop-up scams that lock the browser and play an audio warning remain one of the most common entry points (Microsoft Digital Defense Report).

Warning signs

  • Pop-up that fills the screen with a phone number and locks the browser.
  • Caller from 'Microsoft,' 'Apple,' 'Norton,' or your ISP about a virus.
  • Request to install AnyDesk, TeamViewer, UltraViewer, or LogMeIn.
  • Refund storyline: 'we accidentally sent too much, please return the difference.'
  • Pressure to keep the call going while you go to the bank or a crypto kiosk.

How the scam plays out

Pop-up lock

"'Your computer is infected. Call Microsoft Support at 1-800-... immediately to avoid losing your data.'"

Refund overpayment

"'We accidentally refunded $5,000 instead of $500 — please return the difference via Bitcoin ATM or gift cards.'"

Bank rescue

"'Hackers are inside your account. Move your money to this safe wallet while we trace them.'"

What to do

  • Close pop-ups by force-quitting the browser (Cmd-Q / Alt-F4); never call the number shown.
  • Never grant remote access to your computer to anyone you didn't proactively contact.
  • Verify any 'refund' or 'charge' by logging into the account yourself in a new tab.
  • Keep OS and browser updated; rely on built-in security (Windows Defender, macOS XProtect).

If it already happened

  • Disconnect from the internet, then run a full scan with your built-in security tool.
  • Change passwords from a different, clean device — start with email, then bank.
  • Review bank and brokerage activity and dispute any unauthorized transfers.
  • Report to FTC, IC3, and AARP if you're 60+.

Train continuously — free

Sign up to track progress across every module, earn points, and get alerts when a new scam pattern matches messages you've been getting. Teams can roll the modules out as employee security awareness training.

Sources

Keep learning