← Back to all tech guides
⚠️ Safety Guide

The Microsoft / Apple / Geek Squad Tech-Support Scam

Last verified: August 2026

How the Tech-Support Scam WorksDifferent names, always the same four moves.1Scary pop-upor phone call2"Call thisnumber now"3They ask forremote accessXPay in giftcards / wireEvery real version follows this same path.The gift-card ask is the tell — no real company does this.Illustration — wording and logos vary; the pattern does not.
The four moves every tech-support scam uses, in order.
Four Things Real Companies Never DoSee any one of these? It's a scam. Hang up.Microsoft, Apple & Geek Squad will NEVER:XCall you out of the blue about a virusXAsk to remote into your computerXDemand gift cards, wire, or cryptoXPut a countdown timer on the screenThey will never call you first. You call them.Illustration — general guidance to help you recognize the scam.
Four things a real company will never do — each one is a red flag.

The pop-up that takes over your screen. The phone call that follows. The remote-access tools they ask you to install. Calmly explained, with step-by-step recovery if you already let them in.

For
Seniors & their families
Covers
Pop-ups, fake emails, fake calls
Best Use
By the computer
Bill's Hotline
(330) 200-8042

Why This Scam Works on Smart People

Of all the scams I get called about, this is the one that catches the most accomplished, careful people. The retired engineer. The schoolteacher. The small-business owner who runs his own books. The reason is straightforward: computers are still mysterious to most of us, and when one starts flashing and beeping and a voice on the screen says your bank accounts are at risk, the brain treats it as a real emergency.

You are not supposed to be a computer expert. You are supposed to use the computer the way you use your car — turn it on, drive it, take it to someone who knows when something feels wrong. Falling for a tech-support scam is not a sign you should give up the computer. It's a sign the scammers picked exactly the right pressure point.

Bill's note

I get one of these calls a week. The fix on the computer side is usually under an hour. What takes longer is rotating passwords and freezing credit because we have to assume the scammer copied whatever they could while they had control. Cheap insurance. Worth it.

The Browser Pop-Up That "Locks" Your Screen

The single most important thing to know about that scary pop-up taking over your computer: it's a webpage, not a virus. Your browser (Chrome, Edge, Safari, Firefox) is displaying a webpage designed to look like a system alert. Your computer is fine. The browser window is the whole problem.

What you'd see: "★★★ CRITICAL SECURITY WARNING ★★★ Your computer has been infected with a Trojan virus. Your bank accounts and personal photos are at risk. Do NOT turn off your computer. Call Microsoft Support immediately at 1-855-XXX-XXXX. Your computer is locked until you call." Often with a siren or robotic voice looping, and a countdown clock.
What the page is actually doing: Going full screen to hide browser edges. Disabling close shortcuts. Playing audio to make you panic. What it is NOT doing: It is not reading your files. Not watching you through your camera. Not actually locked to anything. Closing the browser makes it all go away.
The 10-second fix: Hold the power button on your computer for about 10 seconds until it shuts off completely. Wait one minute. Turn it back on. When the browser asks "reopen tabs?" — say no. Pop-up gone. Computer fine.

Microsoft, Apple, and Geek Squad Will NEVER Call You

Burn this sentence into your memory. Microsoft will not call you about a virus. Apple will not call you about a virus. Geek Squad will not call you about a virus. Neither will Norton. Neither will McAfee. These companies do not staff outbound call centers that ring up individual customers. Anyone claiming to be them is lying.

  • You contact them, not the other way around. Go to microsoft.com/support or apple.com/support yourself.
  • Real support doesn't sound panicked. They help with these issues all day.
  • Real support never asks for your password.
  • Real support never pushes payment in gift cards.

The two real numbers: Microsoft Support 1-800-642-7676 · Apple Support 1-800-275-2273. If anyone on the phone claims Microsoft or Apple and the number that called you is not one of those — hang up.

The Fake "Geek Squad / Norton / McAfee" Renewal Email

This variation arrives by email. It looks like an invoice for a service you don't own. The amount is just high enough to get your attention — usually $300 to $500.

What you'd see: "Thank you for your continued subscription. Your Geek Squad Total Protection has auto-renewed for one year — $399.99 has been charged to your card ending in 4421. If you did not authorize this charge, please call our billing department within 24 hours at 1-888-XXX-XXXX to dispute and receive a full refund."
The trap is the phone number. Everything in the email is bait for the call. Once you call, a friendly "refund agent" walks you through letting them onto your computer to "process" the refund. That's the moment it becomes a remote-access scam.
The 30-second sanity check: Did you ever sign up for that service this year? If yes, log into the real company's website yourself — type the address by hand — and check your account. If no, the email is a scam by definition. Delete it. Don't reply, don't click, don't call.

The iPhone "Your iCloud Was Hacked" Variant

The phone rings, caller ID may even spoof Apple, and a calm voice says: "This is Apple Security. We've detected unauthorized access to your iCloud account from Russia. We need to lock your account right now — please verify your Apple ID password."

Most folks know not to give Microsoft a remote-access code. But "verify your Apple ID password" feels different. It isn't. The password goes to the scammer, and within ten minutes they're into your iCloud — your photos, contacts, Find My iPhone, and on a lot of folks' phones, the saved credit cards in Apple Pay.

Three tells:
  • Apple does not call you. They use email and on-screen notifications.
  • Real Apple never asks for your password.
  • The urgency is the giveaway — "right now," "before they lock it."
The right move if you're worried about iCloud: Hang up. Open Settings on your iPhone. Tap your name at the top. Tap "Sign-In & Security." If anything is wrong, the real Apple shows it here. If you want help, call Apple yourself at 1-800-275-2273.

The "I Overpaid Your Refund" Reverse Twist

This is the variation that costs people the most. The scammer has gotten onto your computer to "process the refund." They open your bank account (because you helpfully logged in). They show you a fake screen that says they're processing the refund — but they appear to fumble. "Oh no, ma'am, I accidentally refunded $40,000 instead of $400. My boss will fire me. Please send the $39,600 back so I don't lose my job."

The bank account screen does show $40,000 more. That part looks real because the scammer used browser developer tools to edit the visible page — your actual balance is unchanged, but you can't tell. What actually happened: they moved money between your own accounts — from savings to checking. Then they ask you to wire your own money to them.

The one rule: No honest company will ever ask you to fix their mistake by wiring them cash. Ever. Real refund errors are corrected by the bank or the company, not by the customer running to a Western Union.

Remote-Access Tools — Names to Refuse

Remote-access software is real, legitimate software used by IT departments (including me) when the customer has invited them in. The software itself is not malicious. The problem is when scammers ask you to install it so they can use it against you. Memorize these names. Refuse any of them from any stranger.

  • AnyDesk
  • TeamViewer
  • LogMeIn / LogMeIn Rescue
  • Microsoft Quick Assist (built into Windows)
  • UltraViewer
  • GoToAssist
  • ConnectWise / ScreenConnect

There is no situation in which a stranger should ask you to install remote-access software because they called you. If a real Microsoft, Apple, or bank issue ever requires remote access — very rare — you would initiate it by calling the real company first.

What They CAN Do Once Installed

An honest list. Don't panic — but do understand the actual risk.

Quickly (under 5 minutes):
  • See every browser tab you have open — email, banking, social media.
  • Open new browser tabs and visit any site.
  • Read any file in your folders — documents, photos, scanned ID cards, tax returns saved as PDFs.
  • Copy files off your computer to theirs.
  • Install other software in the background — including software that lets them come back later.
If you left them alone (10+ minutes):
  • Log into accounts where you stayed signed in.
  • Change passwords on those accounts to lock you out.
  • Set up email forwarding to get a copy of every future email — including bank security codes.
  • Order things to your address using saved cards (then redirect the package).

What to Do If You DID Let Them On

Print this section. Do the steps in order.

  1. Unplug the computer from the internet. Pull the ethernet cable or turn off your wifi router. Kicks the scammer off immediately.
  2. Shut the computer down. Hold the power button for 10 seconds.
  3. From a different device (phone, tablet, neighbor's computer) — change your email password first.
  4. Then change your bank password.
  5. Call your bank's fraud line. Back of your debit card. Tell them "I let a scammer onto my computer."
  6. Wait until I can clean the computer before turning it back on with internet. Call (330) 200-8042. Same-day visit if just happened.
Don't log into anything important until the computer is cleaned — the scammer may have left behind software that records your typing. Use your phone for important things until I've checked the computer.

Why Change Your Bank Password EVEN IF They Didn't Touch Your Bank

  1. They could see your browser's saved passwords. Once they had remote control, they could open your password manager.
  2. They could have installed a keystroke logger. Records every key — including the next time you type your bank password.
  3. They could have set up email forwarding. Every future security code, every password-reset link, goes to them too.
  4. The cost of being wrong is wildly asymmetric. Five minutes to change vs. weeks of fraud paperwork. Five minutes wins.

Bill's Protocol When a Customer Calls

Step 1 — Stop the bleeding (right now)

  1. Unplug the computer from the internet.
  2. Hang up if the scammer is still on the line. You don't owe them goodbye.
  3. Shut the computer down — hold the power button 10 seconds.

Step 2 — Lock the accounts (next 30 minutes)

  1. From another device, change your email password.
  2. Then change your bank password.
  3. Turn on two-factor authentication on email and bank.
  4. Call your bank's fraud line.

Step 3 — Freeze your credit (next 30 minutes)

  1. Equifax — equifax.com or 800-685-1111
  2. Experian — experian.com or 888-397-3742
  3. TransUnion — transunion.com or 888-909-8872
  4. Write down your freeze passwords somewhere safe.

Step 4 — Report (next day)

  1. File an IC3 report at ic3.gov. About 20 minutes.
  2. File an FTC report at ReportFraud.ftc.gov. About 5 minutes.
  3. If money moved, file a Portage County Sheriff report: (330) 296-5100.
✂️ Cut this out — stick on the fridge or by the computer

🛡️ The One Rule

Microsoft will NEVER call you about a virus.
Apple will NEVER call you about a virus.
Geek Squad will NEVER call you about a virus.
Norton will NEVER call you about a virus.
McAfee will NEVER call you about a virus.

Any pop-up with a phone number is a scam. Any "renewal" email pushing you to call is a scam. Anyone asking you to install AnyDesk, TeamViewer, LogMeIn, or Quick Assist is a scam.

📞 If a pop-up appears:

  1. Don't click anything.
  2. Hold the power button 10 seconds.
  3. Turn the computer back on after a minute.
  4. Don't "reopen tabs."
  5. If unsure, call Bill: (330) 200-8042.

📞 If you already called the number:

  1. Unplug the internet.
  2. Shut the computer down.
  3. Change email and bank passwords from another device.
  4. Call Bill: (330) 200-8042 — same-day visit when possible.

Wallet Card — 30-Second Pop-Up Check

⚠️ Bill's 30-Second Pop-Up Check

If a scary screen appears on your computer:

  • 1. Is there a phone number on the screen? → If yes, it's a scam.
  • 2. Is it telling me NOT to turn the computer off? → If yes, it's a scam.
  • 3. Is it asking me to install AnyDesk, TeamViewer, or Quick Assist? → If yes, it's a scam.

Hold the power button 10 seconds. Turn it back on. Pop-up is gone.

Unsure? Bill: (330) 200-8042 · Bill's Home Tech · Atwater, Ohio

Help & Reporting Resources

Cleanup After a Tech-Support Scam

I do a tech-support scam cleanup visit — $99 flat, 60–90 minutes. Uninstall AnyDesk / TeamViewer / Quick Assist. Scan for keystroke loggers. Review email forwarding rules. Check browser saved passwords. Install uBlock Origin ad-blocker. Confirm Windows Defender or Mac security is on. Rotate passwords with you. Freeze credit at all three bureaus. 30-day follow-up included.

🏡
In Your Home
No remote runaround. I come to you.
💵
$99 Flat
First visit, no surprise charges.
📅
30-Day Follow-Up
Included with every visit.
📍
Local
Based in Atwater — serving Portage County.

Would you rather I just do this for you?

No shame in it — plenty of folks would rather hand it off, and that's what I'm here for. I'll come to your home, set it up right, and make sure it's working before I leave. Flat $99 per visit — no jargon, no upsell, and every visit is 30-day come-back-free.

Not a hardware job? I can often fix it remotely for $49 — a secure screen-share, up to 2 hours, that you watch the whole time and can end whenever (included free for $39/mo Support Plan members, and it counts toward the $99 if it turns out I need to come out).