How to Spot a Tech Support Scam Before You Call Back

The page goes full screen, a red banner flashes "Your computer is infected," a robotic voice starts reading an error code, and a phone number promises help from a support team. My neighbour called that number last spring. Forty minutes later a stranger had remote control of her laptop and she had paid 399 dollars for a "lifetime protection plan" that did nothing.

Knowing how to spot a tech support scam before you call back is one of the most useful skills for anyone who uses a computer at home or runs a small office. These scams cost victims hundreds of millions of dollars every year according to consumer protection agencies, and older adults lose the most per incident. The good news is that the warning signs are consistent and easy to learn.

How a Tech Support Scam Usually Starts

Most of these scams begin in one of four ways:

A fake warning pop-up in your browser, often after clicking an ad or mistyping a web address.
An unexpected phone call from someone claiming to be from a well known software or computer company.
An email or text about an unpaid renewal for antivirus software you may not even own.
A search result for a company's support line that leads to a fake number placed in a paid ad.

All four aim at the same goal: getting you to call or talk to the scammer, so they can create panic and take control of the conversation.

The Red Flags That Give It Away

A phone number on an error message

Real operating system and browser errors do not include a phone number to call. Major software companies have said this plainly for years. If a warning tells you to call, it is almost certainly a scam.

Pressure and countdown timers

Messages like "Do not close this window or your data will be deleted in 5 minutes" are designed to stop you thinking. Legitimate security tools do not threaten you with a clock.

They called you first

Large tech companies do not phone customers out of the blue to report a virus. They do not monitor your home computer for errors and then call to help.

Requests for remote access

The scammer will ask you to install a remote desktop tool so they can "look at the problem." Once connected, they can see your screen, open files and install malicious software.

Unusual payment methods

Requests to pay with gift cards, cryptocurrency or wire transfers are a strong sign of fraud. A real company will not ask you to read out gift card codes over the phone.

Why the Pop-Up Feels So Convincing

Fake warnings work because they borrow the look of things you trust. They use familiar logos, blue system colours and technical language like "Error 0x80070424" or "Trojan spyware detected." Some lock your browser into full screen and play an alarm sound, so the page appears impossible to close.

It is the same trick behind look alike login pages, covered in how to spot a fake site that copies a real one. The design is built to make you act before you check.

What to Do When a Fake Warning Appears

If a scary pop-up takes over your screen, stay calm and follow these steps:

Do not call the number, click any buttons on the page, or download anything it offers.
Press the Escape key, which often exits full screen mode.
Close the browser tab or window. If it will not close, use Ctrl, Alt and Delete on Windows to open Task Manager and end the browser, or Command, Option and Escape on a Mac to force quit.
When you reopen the browser, do not restore the previous session if it offers to.
Run a scan with the security software you already have installed, just to be safe.

In most cases, the pop-up is only a web page. Closing it ends the threat, because nothing has been installed.

The Common Advice That Leaves a Gap

You will often hear "just never answer unknown numbers" as protection against scam calls. That helps, but it misses the more dangerous route: people who search for help themselves. When your printer breaks or your email stops syncing, you search for a support number, and the top result can be a paid ad run by scammers. Victims in this case feel safe because they initiated the contact.

The fix is to find support details only from the company's own website, typed directly into the address bar, or from the documents that came with the product. Skip the ad results at the top of the search page entirely. This single habit closes a gap that call screening never touches.

If You Already Called or Let Them In

Act quickly, and do not feel ashamed. These operations are run by trained, organised teams.

What happened	What to do now
Gave remote access	Disconnect from the internet, uninstall the remote tool, run a full security scan
Paid by card	Call your card issuer immediately and dispute the charge
Paid with gift cards	Contact the gift card company with the codes and receipt as fast as possible
Shared passwords	Change them from a different, clean device, starting with email and banking
Shared banking details	Call your bank's fraud line and ask about monitoring

Then report it to your national consumer protection or fraud reporting agency. Reports help authorities spot patterns and sometimes recover money. Watch for follow-up "refund" calls, a common second stage where scammers return claiming they will give your money back.

Protecting a Small Office or Family

For a small business, write down one approved way to get IT help, such as a named contractor and their number, and put it where staff can see it. For relatives, especially older parents, agree on a simple rule: no one calls a number from a pop-up, and anyone unsure calls a family member first. Turning on automatic updates and a browser pop-up blocker also cuts down how often these warnings appear. The broader warning signs overlap with those in how to recognize a phishing attempt, so share both with anyone you look after.

FAQ

Can a pop-up alone infect my computer?

Usually not. Most fake warnings are just web pages. The real damage happens when you call, download something, or give remote access.

Will a real company ever call me about a virus?

Major software and device makers say they do not make unsolicited support calls. If you get one, hang up and contact the company through its official website.

How do I know which remote access requests are legitimate?

Only allow remote access when you started the request through a verified channel, such as your own IT provider or a support line taken from the company's official site.

The One Rule to Remember

A real error message never asks you to call a phone number. If a warning does, close the window, find support through the official website yourself, and never pay with gift cards. Teach that rule to one person this week. For more on the attacks aimed at everyday users, see the threats section.