Active threat
Category hub
Tech support scam alerts
Tech-support fraud disproportionately targets adults over 60, with losses topping $924 M in 2024 per the FBI. The hook: a browser pop-up claims your PC is infected, a 'Microsoft' caller says your Wi-Fi is compromised, or an 'Apple ID security' email demands you call a number. The endgame is always remote access + wire/gift-card payment.
Last updated · sorted newest first
Go deeper on this topic
Weekly digests move fast — jump into the evergreen hubs and guides for the full playbook, red flags, and reporting steps.
What this is
A tech-support scam is impersonation fraud in which the attacker poses as a hardware or software vendor (Microsoft, Apple, Norton, your ISP) to gain remote desktop access, steal credentials, and extract payment for fake 'repair' services.
Red flags to watch for
- Pop-up that locks your browser with a phone number and warning siren
- Cold call claiming to be from Microsoft, Apple, or your bank's 'fraud team'
- Caller asks you to install AnyDesk, TeamViewer, UltraViewer, or Quick Assist
- Demand for payment in gift cards, wire, or cryptocurrency — never card on the support site
- 'Refund' calls offering money back from a prior scam — you'll be told to install software to 'process' it
Live cases from the GACS feed
Loading current cases…
What to do if you've been targeted
- 1
Close the pop-up safely
Force-quit the browser (Cmd+Q / Alt+F4 / Task Manager). Never call the number on screen.
- 2
Scan and reset
Run Microsoft Defender / Malwarebytes / a fresh OS reinstall depending on severity. Assume all stored passwords are compromised.
- 3
Revoke remote access
Uninstall AnyDesk/TeamViewer. Check Settings → Apps for any unrecognised remote tools and remove them.
- 4
Notify your bank
If banking sessions occurred during the remote access, freeze cards and enable transaction alerts immediately.
- 5
Report and Shield
File at reportfraud.ftc.gov and save the caller's number + any URLs to your free GACS Shield.
FAQs
Will Microsoft or Apple ever call me unsolicited?
No. Neither company makes unsolicited support calls. Any such call is fraudulent — hang up and report it to the FTC or your national body.
I gave them remote access — what now?
Disconnect from Wi-Fi, uninstall the remote-access tool, run a full malware scan, change every password from a clean device, and revoke active sessions on Google/Microsoft/Apple ID. Notify your bank if you logged in during the session.
Why do tech-support scammers target older adults?
Older users are statistically more likely to comply with authority-framed phone calls and less likely to distinguish a real Windows/macOS dialog from a webpage pop-up. The FBI IC3 reported adults 60+ accounted for more than 68% of tech-support losses in 2024.
Does a 'browser locked' pop-up mean my PC is actually infected?
No. The pop-up is a webpage in a tab — it cannot infect anything on its own. The 'lock' is JavaScript blocking dialog dismissal. Force-quit the browser via Task Manager (Ctrl+Shift+Esc → End Task) or Cmd+Q and the alleged virus is gone — the page was the threat.
How do I report a scam to GACS?
Submit the wallet address, website, phone number, or social handle at gacs.app. Each report is cross-checked against CryptoScamDB, URLhaus, and on-chain analysis before publication. Activate your free GACS Shield to monitor follow-on activity tied to the same actor.
Is the GACS Shield really free?
Yes. Activating your free Shield gives you unlimited scans, saved history, weekly alerts, and a watchlist — no card, no trial. There is no paid scanner tier.
Related scam profiles & guides
Activate your free GACS Shield
Save scammer handles, wallets, and domains. Get alerted when the same actor surfaces in a new report. Unlimited scans, no card.
Get My Free Scam AlertsAuthoritative sources
Independent primary sources used to check and corroborate the guidance on this page.
- FBI Internet Crime Complaint Center (IC3)
Official US channel for reporting internet-enabled fraud and cybercrime.
- US Federal Trade Commission — ReportFraud
Consumer fraud reporting and published enforcement data.
- UK Action Fraud
UK national reporting centre for fraud and cybercrime.
- Canadian Anti-Fraud Centre
Canada's central repository for fraud reports and scam alerts.
