Microsoft scam calls: how the fake tech support call works
Quick answer
A call from someone claiming to be Microsoft about a virus on your computer is a scam. Microsoft doesn't call you and ask for access to your computer. Hang up, don't give anyone control of your device, and report it at ReportFraud.ftc.gov.
- Comes by
- Phone call, Website
- Pretends to be
- Microsoft
- Last updated
How it works
Scammers pretend to be Microsoft technicians. The FTC says the caller claims your computer has a virus, then asks for remote access to fix it. A pop-up on your screen can start the same scam: it tells you to call a toll-free number about a security problem.
Once they have access, they can install malware, steal files and passwords, and charge you for a fake fix. They often ask you to pay with a gift card or give card or bank details. The FTC notes that legitimate companies don't display pop-up warnings that ask you to call a number.
Red flags
- An unexpected call saying your computer has a virus
- A pop-up telling you to call a toll-free number
- A request for remote access to your computer
- Payment by gift card or a request for bank or card details
- A request for your account passwords
Example message
Hello, this is Microsoft technical support. We've detected a virus on your computer. I need you to go to your computer so I can connect and remove it. You can also call us back at [phone number].
What to do
- 1
Hang up, or close the pop-up
The FTC says if someone claiming to be Microsoft calls about viruses, hang up. Don't call numbers in a pop-up.
- 2
Don't give control of your computer
If you let them in, disconnect from the internet, run a scan with security software you already trust, and change your passwords from a different device.
- 3
If you paid, contact your card issuer or the gift card company
Call your credit card company or bank right away. If you paid with a gift card, contact the card company as soon as you can.
- 4
Protect your accounts
Change passwords for your email, bank and any accounts you use on that computer, and turn on two-step verification. Our guide on what to do after a data breach covers the steps.
- 5
Report it
Report it at ReportFraud.ftc.gov and include the phone number you were told to call.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers don't pick numbers and addresses at random. Names, phone numbers, home addresses and email addresses are easy to buy from people-search sites and data brokers, and they leak in breaches, which lets a caller or sender sound like they know you. Serus finds where your details are listed and removes them from the sites that hold them, and alerts you when your data shows up in a breach, so fewer scammers can reach you.
Frequently asked
Does Microsoft call people about viruses?
The FTC says companies like Microsoft don't call and ask for access to your computer. A call like that is a scam.
What if a pop-up says my computer is infected?
Legitimate companies don't show pop-up warnings that ask you to call a toll-free number. Close it and don't call.
Where do I get real help with my computer?
The FTC suggests going to someone you know and trust, using a number you already know is right. Numbers in search results aren't always legitimate.
I gave them remote access. What now?
Disconnect from the internet, change your passwords from another device, tell your bank and report it to the FTC.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
