Fake Customer Support Scams on Email
Fraudulent emails pose as company support about an account, order, or charge, to harvest logins, push payments, or lure victims into remote-access sessions.
Part of: Fake Customer Support Scams
Last reviewed: 1 June 2026
A fake support email imitates the service notices people receive from retailers, banks, and tech companies: an account alert, an order query, a billing problem 'our support team' wants to resolve. In a routine inbox, the offer of help can disarm suspicion.
Genuine support does not solicit logins, fees, or remote access through unsolicited email. Email suits scammers because branding is easy to copy and sender names are simple to spoof, letting a single 'support' template reach many inboxes and steer recipients to a phishing page or a fake helpline.
How this scam works on Email
The email, posing as a company's support team, references an account issue, a recent order, or a suspicious charge, and provides a link or a 'support number' to resolve it.
The link leads to a cloned login or payment page that captures your details, while calling the number connects to a scammer who may request a fee or talk you into installing remote-access software. A fake refund 'overpayment' can be used to demand money back.
The helpful, official tone and the pretext of resolving a problem are designed to prompt a login, call, or download before you verify with the real company.
Common red flags
- An email from 'support' references an account, order, or charge and offers help
- A link opens a login or payment page rather than the official site
- A 'support number' is provided to call about the issue
- You are asked to share login details or install software
- The sender address does not match the company's official domain
- A refund 'overpayment' is used to demand you send money back
How to protect yourself
- Reach support only through the company's official website or app
- Do not click links or call numbers in unsolicited support emails
- Never share login details or install remote-access software
- Verify any account, order, or charge by logging in directly
- Check the sender's full address against the official domain
- Report the email via your provider's phishing tool and delete it
How to report it
- Use your email provider's 'Report phishing' function on the message
- Report the impersonation to the company via its official site
- File a report with your national fraud or cybercrime reporting centre
Frequently asked questions
I called the 'support number' from a fake email and they asked for remote access — what should I do?
Hang up and do not proceed if you haven't already granted access; if you did, uninstall any remote-access software installed and change your important passwords from a separate device. Contact your bank if any financial accounts were accessible during the session.
How do I contact a company's actual support after receiving a suspicious email?
Go to the company's official website by typing the address yourself and use the contact or support details listed there, rather than any number or link from the email. This ensures you're reaching the genuine company rather than the scammer's fabricated contact point.
I sent a refund 'overpayment' back after a fake support email — can I get that money back?
Contact your bank or payment provider promptly to explain the situation and ask about disputing the transfer, since the original 'refund' was very likely fabricated. Also report the email and the impersonation to the company being spoofed.
How do I know a support email is genuine?
Do not act on links or numbers in the email. Log in to your account by typing the official address yourself to check for any genuine issue, and reach support only through the company's official channels.