Fake Customer Support Scams on Email
Fraudulent emails pose as company support about an account, order, or charge, to harvest logins, push payments, or lure victims into remote-access sessions.
Part of: Fake Customer Support Scams
Last reviewed: 1 June 2026
A fake support email imitates the service notices people receive from retailers, banks, and tech companies: an account alert, an order query, a billing problem 'our support team' wants to resolve. In a routine inbox, the offer of help can disarm suspicion.
Genuine support does not solicit logins, fees, or remote access through unsolicited email. Email suits scammers because branding is easy to copy and sender names are simple to spoof, letting a single 'support' template reach many inboxes and steer recipients to a phishing page or a fake helpline.
How this scam works on Email
The email, posing as a company's support team, references an account issue, a recent order, or a suspicious charge, and provides a link or a 'support number' to resolve it.
The link leads to a cloned login or payment page that captures your details, while calling the number connects to a scammer who may request a fee or talk you into installing remote-access software. A fake refund 'overpayment' can be used to demand money back.
The helpful, official tone and the pretext of resolving a problem are designed to prompt a login, call, or download before you verify with the real company.
Common red flags
- An email from 'support' references an account, order, or charge and offers help
- A link opens a login or payment page rather than the official site
- A 'support number' is provided to call about the issue
- You are asked to share login details or install software
- The sender address does not match the company's official domain
- A refund 'overpayment' is used to demand you send money back
How to protect yourself
- Reach support only through the company's official website or app
- Do not click links or call numbers in unsolicited support emails
- Never share login details or install remote-access software
- Verify any account, order, or charge by logging in directly
- Check the sender's full address against the official domain
- Report the email via your provider's phishing tool and delete it
How to report it
- Use your email provider's 'Report phishing' function on the message
- Report the impersonation to the company via its official site
- File a report with your national fraud or cybercrime reporting centre
Frequently asked questions
How do I know a support email is genuine?
Do not act on links or numbers in the email. Log in to your account by typing the official address yourself to check for any genuine issue, and reach support only through the company's official channels.