The phone rings. A calm, professional voice says they're calling from "Microsoft" or "Windows Support." Your computer has been sending error reports. Viruses have been detected. Your license is expiring. They just need remote access to your PC to fix it — and it'll only take a few minutes.

It is a scam. Every time. Microsoft does not call you.

According to the FBI's Internet Crime Complaint Center, tech support scams cost Americans over $1 billion in a single year — and that number only counts the people who reported it. The real figure is higher. Here's exactly what's happening and how to protect yourself and your family.

How the scam works

There are two common entry points:

The phone call: You receive an unsolicited call from someone claiming to be from Microsoft, Windows, your internet provider, or "tech support." They sound professional and use technical-sounding language to create urgency — your computer is infected, your IP address has been flagged, your account is about to be suspended.

The pop-up: A browser window fills your screen with an alarming full-page warning claiming your computer is infected. A phone number is plastered across the screen with instructions to call immediately. The pop-up may play a loud audio alarm and appear impossible to close. When you call the number, you reach the same scammers.

Real warnings don't work this way. Microsoft, Apple, Google, and your internet provider will never call you unsolicited, and legitimate security warnings never include a phone number to call.

What they're really after

Once they have your attention, the scammer's goal is one or more of the following:

  • Remote access to your computer — they'll ask you to download a program like AnyDesk or TeamViewer so they can "run a scan." What they're actually doing is installing malware, stealing saved passwords and files, or locking your machine for ransom.
  • Your credit card or bank account — they'll charge you $299–$499 for "lifetime protection" or a "virus removal" that doesn't exist.
  • Gift cards — a common ask is to pay in Apple, Google Play, or Amazon gift cards, then read them the card numbers over the phone. Gift cards are untraceable and unrecoverable.

What to do if it happens to you

Hang up. You don't owe them an explanation. If a pop-up appears, force-close your browser. On Windows, press Alt + F4 or use Task Manager (Ctrl + Shift + Esc). On Mac, press Command + Q or force-quit from the Apple menu.

If you already gave them remote access or payment information, act immediately:

  1. Disconnect from the internet (unplug the cable or turn off Wi-Fi)
  2. Call your bank to dispute any charges and freeze affected accounts
  3. Change passwords for your email, bank, and any other accounts — from a different, clean device
  4. Have your computer professionally reviewed before using it again
Tip: Talk to your parents and grandparents about this scam specifically. Older adults are disproportionately targeted — and the callers are trained to be persuasive, patient, and difficult to hang up on.

Report it

Whether or not you lost money, report the scam to the FTC at reportfraud.ftc.gov and to the FBI's IC3 at ic3.gov. Reports help law enforcement identify and shut down scam operations — and every report counts.

Think you may have been compromised?

If a scammer had access to your computer — even briefly — your machine needs a thorough review. Texas Data Guardians offers flat-rate in-home checkups starting at $50.

Schedule a checkup