Microsoft Impersonation Scams
Scammers impersonate Microsoft with fake security alerts, pop-up warnings, and tech-support calls designed to gain remote access to your device or charge you for unnecessary 'fixes'.
Last reviewed: 1 June 2026
Microsoft is one of the most impersonated technology brands in the world. Because Windows and Microsoft 365 are used by hundreds of millions of people, a message or alert that appears to come from Microsoft can feel immediately relevant and credible.
The most widespread scam involves a pop-up or phone call warning that your computer has a virus or that your Microsoft subscription has expired. The caller or pop-up urges you to call a number or allow remote access — at which point the scammer either installs malware, steals data, or charges you for fake services.
Microsoft is the victim of this impersonation and has an active reporting process for these scams. Understanding what Microsoft does and does not do helps you shut down these approaches confidently.
How scammers impersonate it
- Displaying browser pop-ups with Microsoft logos claiming a virus has been detected
- Calling and claiming to be Microsoft or Windows Support about an alleged problem with your PC
- Sending emails warning your Microsoft 365 or Outlook account will be suspended
- Spoofing Microsoft email addresses or using look-alike domains
- Using legitimate-looking Microsoft branding and error codes in fake alerts
- Requesting remote access via tools like TeamViewer or AnyDesk to 'fix' invented problems
What the real organisation never does
- Call you unsolicited about a virus or problem on your computer
- Ask for payment in gift cards, cryptocurrency, or wire transfer
- Request remote access to your device through a cold call
- Send a pop-up with a phone number to call for virus removal
- Threaten to disable or delete your account unless you act within hours
- Ask for your Microsoft password over the phone
Common red flags
- An alarming pop-up with a phone number to call — legitimate error messages do not include phone numbers
- An unsolicited call claiming to be 'Windows' or 'Microsoft Support'
- Pressure to install remote-access software
- Request for gift card payment to fix a technical problem
- Urgency — 'your computer will be blocked in 24 hours'
- Caller knows your name but cannot verify account details without asking you
- Email sender domain does not match microsoft.com exactly
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Pop-up: 'WARNING: Your computer is infected. Call Microsoft Support immediately at [phone number]. Do not restart your PC.'
Call: 'Hi, this is Microsoft Technical Support — we have detected suspicious activity on your Windows licence [code]. We need remote access to fix it.'
Email: 'Your Microsoft 365 subscription expires today. Verify your payment at [fake link] to avoid losing access.'
How to verify
- Microsoft will not call you unsolicited — hang up any such call immediately
- Close alarming pop-ups by force-quitting your browser; do not call any number shown
- Check account status by going directly to account.microsoft.com in a new browser window
- Contact Microsoft support through the official Microsoft Support website, not a number from a pop-up
- Never grant remote access to anyone who contacted you first
What to do if you're targeted
- Hang up or close the pop-up immediately without calling any number shown
- If you already granted remote access, disconnect from the internet and run a full security scan
- Change any passwords that may have been visible during a remote session
- Report the scam to Microsoft at microsoft.com/reportascam and to your national fraud service
Frequently asked questions
A pop-up locked my screen and showed a Microsoft number — is that real?
No. Legitimate Microsoft error messages do not include phone numbers and do not lock your screen. Close the browser (force-quit if needed) and run a security scan. Do not call the number.
I already gave them remote access. What should I do?
Disconnect from the internet immediately, run a full antivirus scan, change all your passwords from a different device, and contact your bank if any financial details were visible.
Does Microsoft ever contact customers about security problems?
Microsoft may send automated emails about account security if you are enrolled in their notifications, but they do not make unsolicited phone calls to tell you about problems on your personal device.