How to spot and stop tech support scams before they empty your bank account

Tech support scams are no longer just annoying pop-ups. They have become a polished business for criminals who mix social engineering, fake websites and high-pressure tactics to steal money and sensitive data.

The good news is that most of these scams follow a few repeatable patterns. If you know what to look for, you can usually shut them down before any damage is done.

How tech support scams usually start

Tech support scams typically begin in one of three ways: a scary on-screen message, a surprise phone call or a search result that looks like official support. All three are designed to make you panic and act before you think.

Pop-up scams often claim your device is infected or blocked, use loud alarms or full-screen messages and display fake logos like Microsoft, Apple or your antivirus brand. They usually show a phone number and tell you not to shut down your computer.

Red flags that support is fake

Legitimate companies almost never contact you out of the blue to fix your device. If someone calls claiming to be from “Windows support”, your internet provider or a large security company and insists there is an urgent problem, treat it as suspicious.

Common warning signs include requests to install remote access tools, pressure to stay on the line, talk of “fines” or “legal action” and instructions not to speak to your bank or family. Any demand to pay in gift cards, cryptocurrency or wire transfer is a strong indicator of fraud.

Safe ways to respond to a suspicious contact

If you get an alarming pop-up, try closing the browser tab first. If that fails, use Task Manager or Force Quit to close the browser, then restart the device. Do not call any number that appears on the screen and do not click unknown links or buttons.

If someone phones you claiming to offer support, hang up politely. Then find official contact details on the company’s own website or on a bill you already trust. Call that number instead if you genuinely suspect a problem with your account or device.

What legitimate tech support will and will not do

Real support staff may ask you to verify your identity, but they will not demand passwords for your email, bank or social media accounts. They also will not ask you to read out one-time codes from your bank or authentication app.

Genuine support rarely pressures you to make a decision immediately. They should be willing to send information by email, let you call back on a known number and explain clearly what they are doing if remote access is required for a paid service you initiated.

Practical steps to protect yourself in advance

A few simple habits reduce the chance that you will be caught off guard. Save official support phone numbers for your bank, device maker and internet provider in your contacts so you can quickly check if an unexpected call is real.

Enable multi-factor authentication on key accounts such as email and banking, so even if someone tricks you into sharing a password, they still cannot log in easily. Keep your browser, operating system and security software updated to block known malicious sites and fake adverts.

What to do if you already let a scammer in

If you allowed remote access, disconnect the device from the internet immediately and shut it down. From another secure device, change passwords for your email, banking and any account where you reused the same password. Consider enabling a password manager if you do not already use one.

Contact your bank or card provider as soon as possible, explain that you may have been scammed and follow their guidance on blocking cards or reversing payments. For serious incidents or if sensitive work data may be involved, consult a qualified IT or cybersecurity professional who can check your system thoroughly.

Helping others stay safe

Older family members, teenagers and less tech-confident friends are often prime targets. Share simple rules with them: never trust unsolicited calls, never pay support with gift cards, never share one-time codes and always use official contact details from a bill or the company’s own app.

Encouraging people to pause, breathe and verify before acting can prevent many tech support scams. A short delay to double-check a phone number or website is almost always safer than rushing to “fix” a problem that may not exist at all.