How to spot a tech support scam and what to do next

How a tech support scam works, the warning signs to watch for, and what to do right away if a scammer already connected to your computer.

Warning sign over a phone call, illustrating a tech support scam

A tech support scam starts with a call, a pop-up or an e-mail that says your computer has a problem. The "technician" then asks to connect to your PC. Within minutes they can steal passwords, install malware or move money. This guide shows you how to spot a tech support scam, and what to do if it already happened.

How a tech support scam works

Most scams follow the same script. Knowing it is the best protection.

  1. The hook. You get a phone call from "Microsoft", your bank, your internet provider or a delivery company. Or a loud pop-up fills your browser and says your PC is infected.
  2. The panic. They say hackers are inside your computer, your account is blocked, or you will lose your money. They want you to act fast.
  3. The access. They ask you to install a remote desktop app and read them a code. Now they control your screen.
  4. The damage. They show you fake "errors", ask for payment for a "fix", open your online banking or install spyware.

The remote desktop app is not the problem. It is a normal tool. The problem is giving control to a stranger.

Warning signs to watch for

One of these signs is enough reason to stop.

  • They contacted you first. Microsoft, Apple and real banks do not call to say your computer has a virus.
  • There is pressure and urgency. "Do it now or you lose everything" is a classic trick.
  • A pop-up gives you a phone number to call. Real security warnings never ask you to phone anyone.
  • They ask for remote access to "verify" something. Your bank never needs to see your screen.
  • They want unusual payment. Gift cards, crypto or a money transfer are red flags.
  • They ask you to log in to your bank while they watch. Close everything at once.

What to do if you get a suspicious call or pop-up

Stay calm. The pressure is part of the scam.

  • On the phone: hang up. If you are worried, call the company back on a number from its official website or your bank card.
  • With a pop-up: do not call the number. Close the browser. If it will not close, restart the computer.
  • With an e-mail: do not click links or open attachments. Delete it.

You lose nothing by hanging up. A real company will understand.

Already gave them access? Do this now

If a scammer was on your computer, act quickly. Each step limits the damage.

  1. Disconnect. Close the remote desktop app or unplug the network cable. Turn off Wi-Fi.
  2. Call your bank. Use the number on your card. Ask them to block payments and cards if needed.
  3. Change your passwords. Start with e-mail and banking. Use another device that the scammer did not touch.
  4. Remove what they installed. Uninstall unknown programs and run a full antivirus scan. If unsure, ask a trusted technician.
  5. Turn on two-step login for important accounts, so a stolen password alone is not enough.
  6. Report it. This helps the police and warns others.

Where to report depends on your country. In the US, report to the Federal Trade Commission. In the UK, use Action Fraud. In the EU, contact your national police or cybercrime unit.

How to use remote support safely

Remote help is safe when you stay in control. Follow these rules:

  • Only accept help you asked for, from someone you know and trust.
  • Check who is connecting. A good app shows you the name or ID before you accept.
  • Watch the screen during the session, and end it if something feels wrong.
  • Never give remote access while your online banking is open.

If you want the full basics, read how to access another computer remotely, which also covers safe habits.

How Remotless helps prevent a tech support scam

We build Remotless for real support teams, and we take abuse seriously:

  • You always see who connects and must accept. Nobody joins your screen silently.
  • Companies are checked before they can add PCs for unattended access.
  • Every session is recorded with time, IP address and session type in the company's history.
  • Abusers are blocked. We can end their sessions within seconds and block their IDs.

Read more in our FAQ. And if you run a support team, try Remotless free for 14 days.

Share this with someone you care about

Tech support scams target people who trust easily, often older relatives. Send them this guide. The single most useful rule fits in one sentence: never let a stranger connect to your computer.

scams security safety tips