Tech Support Scams and Fake IT Calls: How to Spot Them

The scam in plain terms

A tech support scam is a con where someone pretends to be from Microsoft, Apple, your internet provider, your bank’s fraud team, or “IT support”, and convinces you that something is dangerously wrong with your computer. Their goal is to make you panic and then do one of three things: let them take remote control of your device, pay them for a fake “fix”, or hand over passwords and codes.

It reaches people two ways. A phone call out of the blue — “we’ve detected a virus on your Windows computer.” Or a pop-up while you’re browsing — a full-screen warning, often with an alarm sound, telling you your PC is infected and you must call a number immediately. Both are scripted, and both are fake.

Why people fall for it

These scams are effective because they’re built around pressure and confusion, not technology.

• They manufacture fear. “Your computer is sending out infected files” or “your bank account is being drained right now” pushes you to act before you think.
• They sound official. Confident jargon, a professional tone, sometimes hold music and a “reference number”.
• They know a little about you. A name, an address, which bank you use — all easily obtained — used to seem legitimate.
• They keep you on the line. Talking to you continuously stops you pausing to check with anyone else.

None of it means they’re genuine. It means they’ve rehearsed.

The tells: how to recognise a fake

Whatever the exact script, tech support scams share the same fingerprints. If you spot these, you’re almost certainly being scammed:

• They contacted you unexpectedly. Microsoft, Apple and your bank do not ring out of the blue to tell you your computer has a virus. A real problem doesn’t announce itself with an incoming call.
• There’s urgency and fear. “Act now or lose your files/money” is pressure designed to stop you checking.
• They want remote access. They ask you to install software like AnyDesk, TeamViewer or “support tools” so they can “look at the problem”. This hands them control of your machine.
• A pop-up gives you a phone number. Real virus warnings from your security software never tell you to phone a number. That number belongs to the scammer.
• They ask for payment in unusual ways. Gift cards, vouchers, bank transfers or cryptocurrency are classic scam demands. No legitimate support desk asks for gift cards.
• They ask for passwords or one-time codes. A genuine provider never needs you to read out a security code from a text or app. Those exist specifically to keep other people out.

What to do — and what not to do

If it’s a phone call: Don’t follow any instructions. Don’t install anything. Simply hang up. You don’t owe a cold caller politeness. If you’re worried it might be genuine, hang up and call the organisation back on a number you already trust — from your bank card, a bill, or their official website — never a number the caller gave you.

If it’s a pop-up: Don’t call the number and don’t click the buttons in the warning, including anything that says “remove virus” or “close”. Instead, close the browser (on Windows you can force it shut with Task Manager; on a Mac, Force Quit). If the pop-up keeps returning, restart the device and have someone you trust check it.

Never, on the strength of an unexpected call or pop-up: install remote-access software, share passwords or one-time codes, buy gift cards, or make a payment.

If you think you’ve already been caught

Don’t be embarrassed — these scams are convincing and they catch careful people. Move quickly:

1. Disconnect the computer from the internet to cut off any remote access.
2. Have the device checked by a trusted IT professional before you use it again, in case they installed anything.
3. From a different, safe device, change your important passwords — email and banking first — and turn on multi-factor authentication so a stolen password isn’t enough on its own.
4. If you paid or shared card details, contact your bank immediately and ask about stopping the payment.
5. Report it to Action Fraud (or Police Scotland in Scotland). Reporting helps others, even if you weren’t caught out.

How a real IT provider actually behaves

Knowing what genuine support looks like makes the fakes obvious.

• You’re expecting them. A real provider works to an agreement with you. Contact comes through the route you’ve set up together — not a surprise call claiming your PC is infected.
• They don’t trade on fear. Good IT support explains what’s happening calmly and gives you time. Manufactured panic is a scammer’s tool, not a professional’s.
• They never ask for gift cards or one-time codes. Billing is done properly, through invoices you recognise. Your security codes stay with you.
• Access is arranged, not demanded. When remote support is genuinely needed, it’s agreed in advance through tools you’ve already approved — never forced on you mid-call.
• You can always verify them. A legitimate provider is happy for you to hang up and call back on your known number. Scammers hate that, because it breaks their script.

If you have an IT provider and get a call claiming to be them, it costs nothing to hang up and ring the number you already hold. A genuine engineer will completely understand.

The bottom line

Tech support scams don’t break into your computer — they talk you into opening the door. The defence is simply to recognise the pattern: unexpected contact, invented urgency, a push to grant access or pay. Slow down, hang up, and check directly with a source you trust.

If you’d like a real, local team you can actually verify — one that explains things in plain English and never cold-calls you into a panic — get in touch with DACROS. You can also see how proper, ongoing support works in our guide to managed IT support, or browse our services.