Microsoft does not call you. Apple does not call you. Google does not call you.
I want you to read that sentence three more times. Tape it to your monitor if you have to. Because the entire fake-tech-support industry — and it is an industry, with call centers, training programs, and quotas — depends on you forgetting it for ninety seconds.
I’m Bill Davis. I run Bill’s Home Tech in Atwater, Ohio. I drove to a house in Kent two weeks ago because a man in his late seventies had let “Microsoft” into his computer for the third time in eleven months. He’s a retired chemical engineer. He’s not stupid. He just got the timing wrong on a Wednesday morning, and the scammer was good at his job.
Let me walk you through how this scam works, exactly what to look for, and what to do if it’s already happened to you.
How the scam shows up
It comes in three flavors. The bait is different; the trap is the same.
Flavor 1: The Pop-Up
You’re browsing the internet. You click a link. Suddenly your screen freezes and a giant warning fills it. Sometimes it’s flashing red. Sometimes there’s a robotic voice yelling “DO NOT CLOSE THIS WINDOW. YOUR COMPUTER IS INFECTED.”
The pop-up has: - The Microsoft logo (or Apple, or Norton, or McAfee — they swap it around) - A toll-free phone number - A scary message: “Call immediately to prevent identity theft”
Reality: It’s a webpage. A fake one. The “virus” is just text and pictures designed to look real. Microsoft does not detect viruses through webpages. The phone number leads to a call center, often in Mumbai or Manila, where a person is paid commission per victim.
Flavor 2: The Cold Call
Your phone rings. The caller has an accent. They say:
“Hello, this is John from Microsoft Technical Department. We have detected unusual activity on your computer.”
They sound official. They might know your name (because they got it from a leaked database). They explain that your computer is sending out spam, or has been hacked, or is “leaking your information.”
They want you to: 1. Go to your computer. 2. Type a website address into your browser. 3. Install a program they walk you through (“It’s just our diagnostic tool, Mrs. Davis”).
Once that program is on your computer, they have full control of it. They can see your screen. They can move your mouse. They can read your files. They can open your bank.
Flavor 3: The Email
You get an email saying your subscription to Microsoft Office, Norton Antivirus, or “GeekSquad Total Protection” is about to renew for $399.99. There’s a phone number to call if you “didn’t authorize this charge.”
You call. They tell you they’ll refund the charge — they just need to walk you through “verifying your bank account” on your computer. Same trap, different bait.
The five red flags. If you see any of these — it’s a scam.
- They contacted you first. Real tech companies don’t proactively call you. Period.
- They want remote access to your computer. No legitimate company starts a customer service call with “let me into your machine.”
- They use urgency. “If you don’t act in the next 10 minutes, your data will be lost.” Real tech support has time. Scammers don’t.
- They want payment in unusual ways. Gift cards, wire transfers, cryptocurrency, “tech support pre-paid cards.” Real companies bill your credit card.
- They tell you not to hang up or check with anyone. “Don’t talk to your son about this — it’ll just confuse the situation.” That’s not customer service. That’s a scammer keeping you isolated.
If you see any one of these — it’s a scam. Hang up. Close the browser. You’re done.
What to do if it’s already happened
OK. Let’s say you’re reading this after you let a “Microsoft tech” into your computer last week. Don’t panic. We can fix this. Take these steps in order:
Step 1: Disconnect the computer from the internet.
If they have software running, cutting the internet stops them from doing anything else. Pull the ethernet cable, or turn off your Wi-Fi.
Step 2: Look at your bank and credit card accounts.
Use a different device — your phone, a tablet, your spouse’s computer. Check for transactions you don’t recognize. Anything in the last 30 days.
If you see anything — even small “test” charges of $1 or $5 — call your bank using the number on the back of your card. Report it as fraud. They’ll freeze the card and reverse the charges.
Step 3: Change your passwords from a different device.
Especially: - Email - Bank logins - Amazon, PayPal, anything with your card on file
Don’t use the compromised computer to do this — they may have installed a “keylogger” that records what you type.
If this feels overwhelming, the hacked checklist post walks through every step of recovering from a scam in detail.
Step 4: Get the computer cleaned.
This is where you call me, or take it to a real local repair shop. The scammer’s software needs to come off, and we need to confirm they didn’t install anything else (a “remote access tool” they could come back to use later).
I do this for $99 flat. I come to your house, take the laptop home, run a deep clean overnight, bring it back the next day, and walk through what I found. We also reset your most critical passwords on a clean device while I’m there.
Call (330) 200-8042 or book at billshometech.com.
Step 5: Tell someone.
Not because they’ll be mad. Because the scammers count on you being too embarrassed to mention it. Tell your spouse, your kids, a close friend. Get it off your chest.
Then — if you feel up to it — file a quick report at reportfraud.ftc.gov. It only takes 5 minutes. Your report goes into a database the FBI uses to map these scam operations. It won’t get your money back today, but it might prevent the next person from losing theirs.
What I told the man in Kent
When I drove out to Kent two weeks ago, I sat down across from this man — let’s call him Frank — and the first thing I said was:
“Frank, I want you to know something before we get into the computer. You’re not an idiot. These people are professionals. They have scripts. They train. The man who called you has done this hundreds of times. You did this once. The math is not in your favor.”
He looked relieved. I think he’d been beating himself up for two days about the third time.
We cleaned the computer. We changed his passwords. We froze his credit. We turned on two-factor authentication on his email. And then we did one more thing: we put a piece of clear tape over his webcam, with one piece of advice written on the underside of the desk.
Right at the front of his keyboard, where he’d see it when he sat down: “If a stranger calls or pops up about my computer, hang up first. Call Bill second.”
He hasn’t fallen for one since. Not because he’s “smarter now.” Because he has a routine. Hang up. Call someone. Routines beat panic every time.
Why this scam works (and why it’s not your fault)
The fake tech support scam works because it stacks three things at once:
- Real fear. Computers are scary when they break. Scarier when they say they’re broken in flashing red.
- Apparent authority. The Microsoft logo is on the screen. The voice on the phone is calm and confident. They sound like they should be in charge.
- Time pressure. “Right now or your data is lost.” Your brain doesn’t have a chance to slow down and think.
These three things together would fool almost anyone, the first time. They especially fool people who didn’t grow up with computers, who already feel a bit out-of-their-depth. That’s not you being slow. That’s the scam being well-designed.
The defense, again, is just a habit:
- A real company will not contact you first.
- A real company will not demand remote access.
- A real company will not insist on gift cards.
- When in doubt, hang up. Call someone. Five minutes of conversation will tell you whether it’s real.
If something feels wrong tomorrow morning, my number is (330) 200-8042. So is the number on the back of your credit card. Use them. That’s what they’re for.