The Microsoft / Apple / Geek Squad Tech-Support Scam
Last verified: August 2026
The pop-up that takes over your screen. The phone call that follows. The remote-access tools they ask you to install. Calmly explained, with step-by-step recovery if you already let them in.
Why This Scam Works on Smart People
Of all the scams I get called about, this is the one that catches the most accomplished, careful people. The retired engineer. The schoolteacher. The small-business owner who runs his own books. The reason is straightforward: computers are still mysterious to most of us, and when one starts flashing and beeping and a voice on the screen says your bank accounts are at risk, the brain treats it as a real emergency.
You are not supposed to be a computer expert. You are supposed to use the computer the way you use your car — turn it on, drive it, take it to someone who knows when something feels wrong. Falling for a tech-support scam is not a sign you should give up the computer. It's a sign the scammers picked exactly the right pressure point.
I get one of these calls a week. The fix on the computer side is usually under an hour. What takes longer is rotating passwords and freezing credit because we have to assume the scammer copied whatever they could while they had control. Cheap insurance. Worth it.
The Browser Pop-Up That "Locks" Your Screen
The single most important thing to know about that scary pop-up taking over your computer: it's a webpage, not a virus. Your browser (Chrome, Edge, Safari, Firefox) is displaying a webpage designed to look like a system alert. Your computer is fine. The browser window is the whole problem.
Microsoft, Apple, and Geek Squad Will NEVER Call You
Burn this sentence into your memory. Microsoft will not call you about a virus. Apple will not call you about a virus. Geek Squad will not call you about a virus. Neither will Norton. Neither will McAfee. These companies do not staff outbound call centers that ring up individual customers. Anyone claiming to be them is lying.
- You contact them, not the other way around. Go to microsoft.com/support or apple.com/support yourself.
- Real support doesn't sound panicked. They help with these issues all day.
- Real support never asks for your password.
- Real support never pushes payment in gift cards.
The two real numbers: Microsoft Support 1-800-642-7676 · Apple Support 1-800-275-2273. If anyone on the phone claims Microsoft or Apple and the number that called you is not one of those — hang up.
The Fake "Geek Squad / Norton / McAfee" Renewal Email
This variation arrives by email. It looks like an invoice for a service you don't own. The amount is just high enough to get your attention — usually $300 to $500.
The iPhone "Your iCloud Was Hacked" Variant
The phone rings, caller ID may even spoof Apple, and a calm voice says: "This is Apple Security. We've detected unauthorized access to your iCloud account from Russia. We need to lock your account right now — please verify your Apple ID password."
Most folks know not to give Microsoft a remote-access code. But "verify your Apple ID password" feels different. It isn't. The password goes to the scammer, and within ten minutes they're into your iCloud — your photos, contacts, Find My iPhone, and on a lot of folks' phones, the saved credit cards in Apple Pay.
- Apple does not call you. They use email and on-screen notifications.
- Real Apple never asks for your password.
- The urgency is the giveaway — "right now," "before they lock it."
The "I Overpaid Your Refund" Reverse Twist
This is the variation that costs people the most. The scammer has gotten onto your computer to "process the refund." They open your bank account (because you helpfully logged in). They show you a fake screen that says they're processing the refund — but they appear to fumble. "Oh no, ma'am, I accidentally refunded $40,000 instead of $400. My boss will fire me. Please send the $39,600 back so I don't lose my job."
The bank account screen does show $40,000 more. That part looks real because the scammer used browser developer tools to edit the visible page — your actual balance is unchanged, but you can't tell. What actually happened: they moved money between your own accounts — from savings to checking. Then they ask you to wire your own money to them.
Remote-Access Tools — Names to Refuse
Remote-access software is real, legitimate software used by IT departments (including me) when the customer has invited them in. The software itself is not malicious. The problem is when scammers ask you to install it so they can use it against you. Memorize these names. Refuse any of them from any stranger.
- AnyDesk
- TeamViewer
- LogMeIn / LogMeIn Rescue
- Microsoft Quick Assist (built into Windows)
- UltraViewer
- GoToAssist
- ConnectWise / ScreenConnect
There is no situation in which a stranger should ask you to install remote-access software because they called you. If a real Microsoft, Apple, or bank issue ever requires remote access — very rare — you would initiate it by calling the real company first.
What They CAN Do Once Installed
An honest list. Don't panic — but do understand the actual risk.
- See every browser tab you have open — email, banking, social media.
- Open new browser tabs and visit any site.
- Read any file in your folders — documents, photos, scanned ID cards, tax returns saved as PDFs.
- Copy files off your computer to theirs.
- Install other software in the background — including software that lets them come back later.
- Log into accounts where you stayed signed in.
- Change passwords on those accounts to lock you out.
- Set up email forwarding to get a copy of every future email — including bank security codes.
- Order things to your address using saved cards (then redirect the package).
What to Do If You DID Let Them On
Print this section. Do the steps in order.
- Unplug the computer from the internet. Pull the ethernet cable or turn off your wifi router. Kicks the scammer off immediately.
- Shut the computer down. Hold the power button for 10 seconds.
- From a different device (phone, tablet, neighbor's computer) — change your email password first.
- Then change your bank password.
- Call your bank's fraud line. Back of your debit card. Tell them "I let a scammer onto my computer."
- Wait until I can clean the computer before turning it back on with internet. Call (330) 200-8042. Same-day visit if just happened.
Why Change Your Bank Password EVEN IF They Didn't Touch Your Bank
- They could see your browser's saved passwords. Once they had remote control, they could open your password manager.
- They could have installed a keystroke logger. Records every key — including the next time you type your bank password.
- They could have set up email forwarding. Every future security code, every password-reset link, goes to them too.
- The cost of being wrong is wildly asymmetric. Five minutes to change vs. weeks of fraud paperwork. Five minutes wins.
Bill's Protocol When a Customer Calls
Step 1 — Stop the bleeding (right now)
- Unplug the computer from the internet.
- Hang up if the scammer is still on the line. You don't owe them goodbye.
- Shut the computer down — hold the power button 10 seconds.
Step 2 — Lock the accounts (next 30 minutes)
- From another device, change your email password.
- Then change your bank password.
- Turn on two-factor authentication on email and bank.
- Call your bank's fraud line.
Step 3 — Freeze your credit (next 30 minutes)
- Equifax — equifax.com or 800-685-1111
- Experian — experian.com or 888-397-3742
- TransUnion — transunion.com or 888-909-8872
- Write down your freeze passwords somewhere safe.
Step 4 — Report (next day)
- File an IC3 report at ic3.gov. About 20 minutes.
- File an FTC report at ReportFraud.ftc.gov. About 5 minutes.
- If money moved, file a Portage County Sheriff report: (330) 296-5100.
🛡️ The One Rule
Microsoft will NEVER call you about a virus.
Apple will NEVER call you about a virus.
Geek Squad will NEVER call you about a virus.
Norton will NEVER call you about a virus.
McAfee will NEVER call you about a virus.
Any pop-up with a phone number is a scam. Any "renewal" email pushing you to call is a scam. Anyone asking you to install AnyDesk, TeamViewer, LogMeIn, or Quick Assist is a scam.
📞 If a pop-up appears:
- Don't click anything.
- Hold the power button 10 seconds.
- Turn the computer back on after a minute.
- Don't "reopen tabs."
- If unsure, call Bill: (330) 200-8042.
📞 If you already called the number:
- Unplug the internet.
- Shut the computer down.
- Change email and bank passwords from another device.
- Call Bill: (330) 200-8042 — same-day visit when possible.
Wallet Card — 30-Second Pop-Up Check
⚠️ Bill's 30-Second Pop-Up Check
If a scary screen appears on your computer:
- 1. Is there a phone number on the screen? → If yes, it's a scam.
- 2. Is it telling me NOT to turn the computer off? → If yes, it's a scam.
- 3. Is it asking me to install AnyDesk, TeamViewer, or Quick Assist? → If yes, it's a scam.
Hold the power button 10 seconds. Turn it back on. Pop-up is gone.
Unsure? Bill: (330) 200-8042 · Bill's Home Tech · Atwater, Ohio
Help & Reporting Resources
- Microsoft Real Support: 1-800-642-7676. Type support.microsoft.com to find this number yourself.
- Apple Real Support: 1-800-275-2273. Type support.apple.com to find this number yourself.
- AARP Fraud Watch: 877-908-3360. Free, trained volunteers.
- FBI IC3: ic3.gov. Federal reporting.
- FTC — Report Fraud: ReportFraud.ftc.gov.
- Ohio Attorney General: 800-282-0515.
- Portage County Sheriff (non-emergency): (330) 296-5100.
- Bill's Home Tech: (330) 200-8042. Tech-support scam cleanup $99 flat.
Cleanup After a Tech-Support Scam
I do a tech-support scam cleanup visit — $99 flat, 60–90 minutes. Uninstall AnyDesk / TeamViewer / Quick Assist. Scan for keystroke loggers. Review email forwarding rules. Check browser saved passwords. Install uBlock Origin ad-blocker. Confirm Windows Defender or Mac security is on. Rotate passwords with you. Freeze credit at all three bureaus. 30-day follow-up included.
Would you rather I just do this for you?
No shame in it — plenty of folks would rather hand it off, and that's what I'm here for. I'll come to your home, set it up right, and make sure it's working before I leave. Flat $99 per visit — no jargon, no upsell, and every visit is 30-day come-back-free.
Not a hardware job? I can often fix it remotely for $49 — a secure screen-share, up to 2 hours, that you watch the whole time and can end whenever (included free for $39/mo Support Plan members, and it counts toward the $99 if it turns out I need to come out).