Quick answer
Fake tech support is a scam where an attacker contacts you by phone, email, or pop-up window, claims there is a problem with your computer, and asks for remote access or payment. Never give computer access or card details to someone who called you unsolicited. If you have already given access, disconnect immediately, change your passwords, and run an antivirus scan.
How to recognize the problem
- Phone call claiming your computer is infected or has a Windows problem
- Pop-up window with a sound alert and a support phone number
- An unknown person asks you to install a remote access program
- Payment by card or gift cards is requested to remove viruses
- The computer behaves strangely after talking to support
Most common causes
Random phone calls
Scammers call random numbers and claim they have information about an infected computer. These are false claims designed to make you cooperate.
Fake pop-up windows
Websites display a window that looks like an antivirus or Windows warning, with a sound alert and a support number. The window is fake and does not come from the system.
Planted support number
Fake tech support numbers can appear in search results or on websites. Calling that number puts you in contact with scammers.
Abuse of remote access
Remote assistance programs are legitimate, but scammers use them to take control of your computer and data.
Step-by-step fix
- 1
Stop communication and do not give access
If someone calls you claiming there is a problem with your computer, hang up immediately. Do not install remote access programs and do not give card details. Remember that Microsoft, operators, and computer manufacturers do not call users in this way.
- 2
Close fake windows without clicking
If a pop-up window with a warning and a phone number appears, do not click any buttons in it. Close the browser using
Xor open Task Manager withCtrl + Shift + Escand end the browser task. Do not call the number shown in the window. - 3
Check if a remote access program is installed
Open
Settings > Apps > Installed appsand review the list. If you suspect access is still active, disconnect from the internet before uninstalling. If you see an unknown remote control program (e.g., AnyDesk, TeamViewer, or similar) that you did not intentionally install, uninstall it. Then restart the computer. - 4
Change passwords from another device
If you gave access to your computer, change the passwords for email, banking accounts, and other important services. Do this from another clean device (phone or another computer). Enable two-factor authentication where possible.
- 5
Run an antivirus scan
Open
Windows Security > Virus & threat protection > Scan optionsand selectFull scan. Wait for the scan to finish and remove any threats found. If you do not have another antivirus, use the built-in Windows Security. - 6
Check financial transactions
If you gave card details, contact your bank immediately and block the card. Review statements and report any suspicious transaction. The bank can initiate a refund procedure.
- 7
Report the scam
Report the case to the competent consumer protection authorities and the police, specifically the High-Tech Crime Department. Save evidence: phone number, email address, screenshot, and transaction details.
- 8
Clean the computer if access occurred
If the scammer had remote access, the safest option is to reset the computer to factory settings or take it for a professional inspection. A reset deletes all files and installed programs, so back up important files to an external drive beforehand.
If you fell for a payment scam
If you paid by card, call your bank immediately and request that the card be blocked and a procedure for unauthorized transaction be initiated. If you paid with gift cards, save the receipts and report the case to the police. Also notify the service whose gift cards they are (e.g., the store) so they can block the cards. Change passwords on all accounts and check if a remote access program remains on the computer. If you are not sure the computer is clean, reset it to factory settings. Keep in mind that a reset deletes all data, so back up important files beforehand.
How to prevent it
- Never give remote access to your computer to someone who contacted you unsolicited.
- Do not call phone numbers displayed in pop-up windows.
- Use strong passwords and two-factor authentication on important accounts.
- Regularly update Windows and your antivirus program.
When to call a professional
If you gave remote access or card details, or if the computer still shows suspicious behavior, contact an IT expert for inspection and system cleanup.
IT infrastructure maintenance · Servers, networks, backup, security and helpdeskFAQ
Does Microsoft ever call users about computer problems?
No. Microsoft does not call users by phone to inform them about a virus or computer problem. Such calls are always a scam.
What should I do if I have already installed a remote access program?
Disconnect immediately, uninstall the program, change passwords from another device, and run an antivirus scan. If you gave card details, block the card with your bank.
How do I recognize a fake pop-up window?
A fake window usually contains a sound alert, a phone number, and a message that the computer is infected. Real antivirus software does not display a support phone number in that way. Close the window without clicking any buttons.