I fell for a tech support scam — what should I do?
Disconnect from the internet, run antivirus from a trusted tool, change passwords from a different device, and contact your bank if money was paid. Report to the FTC.
Last reviewed: 10 June 2026
Explanation
Tech support scams begin with a pop-up warning, a cold call, or a search ad claiming your computer has a critical error. A fake technician then either talks you through 'fixing' the problem and invoices you, or gains remote access to your machine. Both paths lead to the same outcome: money or data is stolen.
If the scammer had remote access to your device, treat it as compromised. Disconnect from the internet immediately, end any remote session, and run a full antivirus scan. Windows Defender is adequate for initial detection, but for a thorough check consider a second opinion with Malwarebytes or similar. If you are concerned about persistent backdoors, reinstalling the operating system is the safest option.
If you paid for the fake service, dispute the charge with your card issuer as quickly as possible. Tech support scams often use legitimate payment processors, making chargebacks successful when filed promptly. If you paid by gift card, call the gift card issuer immediately to report potential fraud.
Change your email password and any other passwords that were visible or stored in your browser during the scam. If the scammer viewed your bank account during the session, call your bank immediately. Enable two-factor authentication on important accounts. File a report with the FTC at ReportFraud.ftc.gov and the FBI's IC3 — tech support scams are actively investigated.
Common red flags
- Pop-up warning claiming Microsoft, Apple, or antivirus company detected a virus
- Phone number in the pop-up that you are told to call immediately
- Unsolicited call from 'Windows Technical Department' about a problem on your computer
- Technician shows you Event Viewer 'errors' as proof your computer is infected
- Request to install remote access software to 'run diagnostics'
- Invoice for hundreds of dollars for a 'support plan' or 'virus removal'
What to do now
- Disconnect the device from the internet immediately
- End the remote access session and uninstall the software used
- Run a full antivirus scan from a trusted tool
- Change email and banking passwords from a different device
- Dispute any charges made to your credit or debit card
- Call your bank if the scammer accessed your account during the session
- Report to the FTC at ReportFraud.ftc.gov
Frequently asked questions
Did real Microsoft or Apple ever send me this warning?
No. Microsoft and Apple do not send pop-up warnings with phone numbers to call, and they do not proactively call you about problems on your device. All such warnings are scams. Close the browser, ignore the number, and run your own antivirus scan.
I already paid — can I get a refund from the scam company?
Attempting to call them back often results in a second scam where they 'refund' money by sending too much and asking you to send back the difference. Do not call them. Dispute the charge with your card issuer instead.