Tech Support Scams: How to Spot Fake Microsoft & Apple Pop-ups
Fraudsters claim your computer has a virus, your account has been hacked, or your refund went wrong, and demand payment or remote access to 'fix' it.
Why this scam works
Most users can't easily tell whether a security alert is real. Scammers exploit that uncertainty by combining a dramatic warning with a friendly 'helper' to walk you through giving them control.
What's happening now
- Tech-support scam losses reported to the FBI IC3 reached over $924 million in 2023, with adults 60+ accounting for two-thirds of losses (FBI IC3 2023, IC3 Elder Fraud Report).
- Many tech-support scams now route victims through a refund-overpayment storyline that ends at a Bitcoin ATM or wire transfer (FTC, FBI).
- Pop-up scams that lock the browser and play an audio warning remain one of the most common entry points (Microsoft Digital Defense Report).
Warning signs
- Pop-up that fills the screen with a phone number and locks the browser.
- Caller from 'Microsoft,' 'Apple,' 'Norton,' or your ISP about a virus.
- Request to install AnyDesk, TeamViewer, UltraViewer, or LogMeIn.
- Refund storyline: 'we accidentally sent too much, please return the difference.'
- Pressure to keep the call going while you go to the bank or a crypto kiosk.
How the scam plays out
Pop-up lock
"'Your computer is infected. Call Microsoft Support at 1-800-... immediately to avoid losing your data.'"
Refund overpayment
"'We accidentally refunded $5,000 instead of $500 — please return the difference via Bitcoin ATM or gift cards.'"
Bank rescue
"'Hackers are inside your account. Move your money to this safe wallet while we trace them.'"
What to do
- Close pop-ups by force-quitting the browser (Cmd-Q / Alt-F4); never call the number shown.
- Never grant remote access to your computer to anyone you didn't proactively contact.
- Verify any 'refund' or 'charge' by logging into the account yourself in a new tab.
- Keep OS and browser updated; rely on built-in security (Windows Defender, macOS XProtect).
If it already happened
- Disconnect from the internet, then run a full scan with your built-in security tool.
- Change passwords from a different, clean device — start with email, then bank.
- Review bank and brokerage activity and dispute any unauthorized transfers.
- Report to FTC, IC3, and AARP if you're 60+.
Train continuously — free
Sign up to track progress across every module, earn points, and get alerts when a new scam pattern matches messages you've been getting. Teams can roll the modules out as employee security awareness training.
Sources
Keep learning
What is Phishing? How to Spot Phishing Emails, Texts & Calls
Fraudulent emails (phishing), texts (smishing), and phone calls (vishing) that appear to be from legitimate sources, designed to steal login credentials or personal information.
ReadImposter Scams: How to Spot Fake IRS, Bank & Family Calls
Scammers pose as trusted figures — family members in trouble, IRS or police officers, Social Security, Medicare, or your own bank — to demand immediate payment or sensitive data.
ReadDeepfake Scams: How to Spot AI Video Call Fraud
Real-time face-swap and voice-clone filters let scammers impersonate executives, family members, romantic partners, or job candidates on Zoom, Teams, FaceTime, and WhatsApp video calls.
Read