How to Spot a Fake Tech Support Call (and Why Microsoft Will Never Call You)

The Phone Rings

"Hello, this is Kevin from Microsoft Technical Support. Our monitoring system has detected that your computer is sending out error reports indicating a serious virus infection. I'm calling to help you fix this before your personal files are damaged."

Sound familiar? It might not be exactly that script, but the setup is the same: an unexpected call from someone claiming to represent a major technology company, warning you about a problem with your computer, and offering to fix it — usually for a fee, and usually right now.

This is one of the most successful scams in the world. The Federal Trade Commission estimates that Americans lose over a billion dollars a year to tech support scams, and the real number is likely higher because many victims are too embarrassed to report it. The victims aren't foolish or gullible — they're targeted by professional criminal operations that study human psychology and exploit universal instincts: the desire to protect what's yours, the fear of loss, and the trust we instinctively extend to someone who sounds authoritative.

Here's the most important thing to know, and we'll say it up front: Microsoft, Apple, Google, and legitimate technology companies will never call you unsolicited about a problem with your computer or your accounts. Never. It doesn't happen. Their customer support doesn't work that way. If you get a call like this, it is a scam, 100% of the time, no exceptions.

Why This Scam Works So Well

Tech support scammers are professional manipulators. They don't rely on technical tricks — they rely on psychological ones. Here's what makes their approach so effective:

Authority. They claim to represent a company you know and trust. "Microsoft" or "Apple" or "BT" or "Telstra" or "your internet provider." These are names we've heard for decades, brands we associate with legitimacy. The scammer borrows that trust.

Fear. The message is always urgent: your computer is infected, your bank account is at risk, personal files will be destroyed, your identity is being stolen. Fear bypasses rational thought. When we're scared, we don't ask the questions we normally would.

Technical jargon. They use words that sound technical — "malware," "IP address," "server logs," "error reports" — to convince you they possess specialized knowledge. But here's the tell: they use these terms loosely and incorrectly. A real technician can explain exactly what's happening in plain language. A scammer hides behind buzzwords.

Isolation. They'll sometimes tell you not to discuss the call with anyone because "the hackers might be monitoring your communications." This is designed to prevent a family member from recognizing the scam.

The "sunk cost" trap. Once you've been on the phone for 20 minutes and they've "diagnosed" your problem, you're more likely to agree to whatever they propose next, because you've already invested time and mental energy. Walking away feels like admitting you were fooled.

The Most Common Scripts

Scammers refine their scripts constantly, but a few patterns repeat endlessly because they work:

Script 1: The Virus Warning

The call: "Our servers have detected that your computer is infected with a virus that's stealing your banking information. I need to walk you through removing it."

What they want: To convince you to download remote access software — a legitimate program that lets someone control your computer from far away, like TeamViewer or AnyDesk. Once they have access, they "show" you evidence of the infection by opening harmless system logs and presenting them as proof. Then they offer to "fix" the problem for a fee, usually several hundred dollars, paid by credit card or gift card.

The reality: No company monitors your personal computer for viruses. That's not a service anyone provides. The "errors" they show you in your system logs are completely normal — every Windows computer logs routine events that look alarming to an untrained eye.

Script 2: The Accidental Refund

The call: "This is Amazon/Microsoft/Apple customer service. We're processing a refund for a subscription you were incorrectly charged for. Let me guide you through receiving your $399 refund."

What they want: They direct you to a website where they ask you to log into your bank account. Through sleight of hand — sometimes by remotely editing what you see on screen — they make it appear that they've "accidentally" refunded you $3,990 instead of $399. They become apologetic, panicked: "Oh no, I could lose my job. Please, you need to return the difference." They instruct you to buy gift cards and read them the numbers over the phone. Days later, the "refund" disappears because it was never real — just a manipulated display.

This is sometimes called the "refund scam" or the "overpayment scam," and it exploits the fact that bank transactions take time to fully process. The money that appears in your account isn't actually there, but the gift card money you send back is gone forever.

Script 3: The Subscription Renewal

The call: "This is a courtesy call to let you know your Norton/McAfee/Geek Squad subscription is about to auto-renew at $499. Would you like to cancel or renew?"

What they want: When you say "cancel," they ask for your credit card information — "just to verify your identity and process the cancellation." Or they ask for remote access to "walk you through the cancellation process," which leads to the same outcome as Script 1.

The reality: They don't know whether you have any subscription. They're casting a wide net. If you say you've never heard of the service, they'll say the subscription was started fraudulently and offer to "help" you cancel it. The goal is always the same: payment information or remote access.

Red Flags: How to Know It's a Scam in 10 Seconds

You don't need to be a technology expert to spot these scams. Just look for these signs:

They called you first. This is the single most reliable indicator. Real tech support is reactive — you call them because you have a problem. They don't call you because they detected one.

They want remote access. Legitimate companies don't ask for remote access to your computer during an unsolicited call. If someone you didn't contact asks to control your computer, it's a scam.

They ask for payment by gift card. No legitimate business, under any circumstances, ever accepts gift cards as payment. Gift cards are untraceable, which is exactly why scammers demand them. If someone asks you to pay with Apple, Google Play, Amazon, or Target gift cards, it is a scam.

They create urgency. "Your computer will crash in 24 hours." "Your bank account is being drained right now." "You have to act immediately." Real problems with your computer rarely require split-second decisions. Anyone pressuring you to act before you can think is manipulating you.

They ask for sensitive information. "Just confirm your Social Security number so I can verify your identity." "I'll need your credit card to process the refund." Real companies you already do business with don't need this information — they already have it.

What to Do When You Get the Call

The correct response is simple and always the same:

Hang up. Don't explain why you're hanging up. Don't tell them you know it's a scam. Don't engage at all. Just hang up. Every second you stay on the line gives a trained manipulator another chance to find a way through your defenses.

Do not call back. Some scammers leave voicemails with urgent callback numbers. These are part of the scam. The number connects to the scammers, not to any legitimate company.

Block the number. On both iPhone and Android, you can block individual numbers. Go to your recent calls, tap the "i" or info icon next to the number, and choose "Block this Caller." Be aware, though, that scammers frequently spoof (fake) phone numbers — the number on your screen isn't really their number, and they'll call from a different one next time. Blocking helps, but it won't stop every call.

Report it. Reporting matters because it helps authorities build cases and identify patterns:

• In the U.S., report to the FTC at ReportFraud.ftc.gov
• You can also report to the FBI's Internet Crime Complaint Center at ic3.gov
• If the scammer impersonated Microsoft, forward details to Microsoft at their phishing reporting address

What If You Already Fell for It?

First: you are not stupid, and you are not alone. These scams are run by full-time criminals who have spent years refining their techniques. Their scripts are tested, their psychological tactics are studied, and they deliberately target people who are less familiar with how the technology industry actually operates.

Here's what to do now:

If you gave remote access to your computer:

• Turn the computer off immediately (hold the power button if necessary)
• Disconnect it from the internet (unplug the ethernet cable or turn off Wi-Fi)
• Take it to a reputable local computer repair shop — not a chain that advertises heavily, but a local shop with good reviews — and explain what happened. Have them check for any malicious software the scammer may have installed.
• Change all your passwords from a different device (not the computer that was accessed). Start with email and banking.

If you paid by credit card:

• Call your credit card company immediately and explain the situation. Ask for a chargeback — a reversal of the transaction. You have legal protections against fraudulent charges, and most credit card companies will reverse them if you report them quickly.
• If you gave them your credit card number, cancel the card and get a new one.

If you paid by gift card:

• Act immediately — gift card funds are extremely difficult to recover once spent, but if you contact the gift card company right away (the number is on the back of the card), they may be able to freeze the funds if they haven't been used yet. Be aware that recovery is unlikely but worth attempting.

If you gave them your Social Security number or other personal information:

• Visit identitytheft.gov for a step-by-step recovery plan
• Place a fraud alert on your credit reports by contacting any one of the three major credit bureaus (Equifax, Experian, or TransUnion); they are required to notify the other two
• Consider a credit freeze, which prevents anyone from opening new accounts in your name

How to Protect Yourself Going Forward

Register with the Do Not Call Registry at DoNotCall.gov. This won't stop scammers — they don't respect the registry — but it reduces the number of telemarketing calls overall and makes scam calls stand out more.

Use your phone's built-in call screening. iPhones have "Silence Unknown Callers" (Settings > Phone). Android phones have "Call Screen" on Pixel devices and similar features from Samsung and other manufacturers. These features send calls from unknown numbers directly to voicemail. Legitimate callers will leave a message; scammers rarely do.

Be especially protective of older family members. Scammers specifically target people over 60 because they're perceived as more trusting, more likely to have retirement savings, and less likely to report the crime. Have a conversation with older relatives about these scams. Make sure they know the core rule: Microsoft and Apple will never call you.

If you're uncertain, call the company yourself. If someone claiming to be from Amazon or your bank calls with an urgent problem, hang up, look up the company's real phone number (don't use a number the caller gave you), and call them directly. Ask: "Did someone from your company just call me about [the issue]?" The answer will almost certainly be no.

A Final Word

The shame and embarrassment that scammers count on is part of their strategy. They know that victims often blame themselves, stay silent, and don't report the crime — which lets the scammers keep operating. If this happened to you, you are not gullible or foolish. You were targeted by professionals whose full-time job is deception. Reporting it helps stop them from doing it to someone else.

Remember: legitimate tech support doesn't call you. If they call, it's a scam. Hang up, and don't look back.