How do I spot a fake Microsoft email or support call?

Microsoft impersonation runs across two channels: email phishing and unsolicited phone calls. The email variant typically claims your Microsoft account has been compromised, a subscription has renewed unexpectedly, or a device registered to you is showing warning signs. The call variant claims to be from 'Microsoft Support' and says your computer is sending error reports.

In the email version, you are directed to a fake Microsoft login page, or to a phone number staffed by the scammers. In the phone version, you are persuaded to install remote desktop software (AnyDesk, TeamViewer) so the fraudster can 'check your system'. Once connected, they show you false error screens from Windows Event Viewer, demand a fee, and sometimes steal stored passwords or install malware.

Microsoft's legitimate services contact you through notifications inside your Microsoft Account dashboard (account.microsoft.com) or through the Windows activation system, not unsolicited emails or cold calls. They never ask you to pay for virus removal via gift card, cryptocurrency, or wire transfer.

If you receive a call, hang up. If you receive an email, log in to account.microsoft.com in a new tab and check your security alerts there. Never install remote-access software at the request of a caller you did not initiate contact with.