Fake Customer Support Scams

Fake customer support scams involve criminals impersonating the help team of a retailer, marketplace, payment platform, or delivery service. They intercept or proactively contact people who need support — through fake phone numbers listed in search results, social media profiles that reply to public complaints, or search engine ads for support contact pages — with the goal of stealing credentials, card details, or direct access to the victim's device or bank accounts.

This scam exploits a moment of vulnerability. People who reach out for customer support are already dealing with a problem — a missing order, a refund that has not arrived, an account access issue. That frustration and urgency makes them more likely to follow instructions from someone who appears to be in a position to help.

The consequences can be severe. Remote access to a device can lead to complete financial account takeover. Shared one-time codes allow fraudsters to bypass two-factor authentication. Card details entered on a fake verification page are used for further fraud. The harm can extend well beyond the original purchase dispute.

The scam operates through several entry points. The first is search: when someone searches for a retailer's contact number, paid search ads for fake numbers may appear above organic results. The fake number looks authoritative in the ad, and the person calls it believing they have found official support.

The second is social media monitoring: scammers watch public complaint posts on social platforms and reply quickly with a fake support profile that looks credible. The person replying to their complaint feels assisted rather than targeted.

Once contact is established, the 'support agent' follows a script. They express sympathy, confirm the issue, and then ask for information or actions that seem procedurally necessary. These typically include: providing a one-time code sent to the victim's phone (which actually authorises a transaction or account change); entering card or bank details to 'verify the account'; or installing a remote-access application to 'allow the support team to investigate directly'.

Remote access is the most dangerous endpoint. Once granted, the fraudster can navigate the device, open banking apps, transfer funds, and create new payees — all while talking the victim through an apparently unrelated 'support process'.

People in the middle of a support problem want it resolved. They are already in a service mindset — ready to follow instructions, provide information, and trust that the person helping them knows what they are doing. Fake support agents exploit this cooperative state.

The setting also creates plausibility. If you have just posted publicly about a problem with a retailer and someone replies claiming to be from that retailer's support team, the timing and context feel right. It takes deliberate scepticism to question something that fits so naturally into your expectation of what should happen.

A person has an unresolved refund with an online retailer. They search for the retailer's customer service number, click the first result which is a paid ad, and call the number. The person who answers sounds professional, confirms the order number, and says they can see the account. To process the refund, they ask the caller to install a screen-sharing app so they can 'verify the account from their end'. Once the app is installed, the caller is talked through unrelated steps while the agent navigates to the banking app open on the device and initiates transfers to an account they control.

Hi, this is [retailer] support. To process your refund, install [remote tool] and share the code.

I can see your case here — I just need you to confirm the code sent to your phone to verify it is you.

To complete your refund, I need your card number to reverse the charge directly.

Please install [app name] so I can connect to your account and escalate this for you.

We can resolve this now — just send [amount] in gift cards to cover the account security hold, and it will be refunded immediately.

Always find support contact details by starting from the retailer's official website or app — navigate there yourself rather than using search results or links in messages. Bookmark official contact pages for services you use regularly.

Be particularly careful about phone numbers found through search engine ads. Ads can be placed by anyone and may appear before genuine results. Look for the official site's contact page in the organic results, or go directly to the site and find the number there.

Genuine support agents do not need you to install remote-access software. They do not need your one-time security codes. They do not need your password. If any of these are requested, end the call or conversation immediately and contact the real retailer through a channel you have independently verified.