Microsoft & Apple Tech Support Scams: Full Guide

A familiar logo. An alarming pop-up. A toll-free number that looks official. These are the hallmarks of one of the most financially devastating cons in America today. Tech support scams — in which criminals pose as representatives of Microsoft, Apple, or other trusted brands — drained nearly $1.46 billion from victims in 2024 alone, making them the third-costliest fraud category tracked by the FBI [3]. That figure represents a staggering 87% increase from 2022 losses, and it is almost certainly an undercount, since most victims never file a report [4]. Behind every statistic is a real person — often panicked, often isolated — who trusted a logo they recognized.

What Is a Tech Support Scam and How Does It Work?

At its core, a tech support scam is a confidence scheme disguised as customer service. Criminals impersonate legitimate technical support representatives and claim there is a problem with a victim's device — a claim that is entirely fabricated [1]. The scam typically begins with a pop-up alert that floods your screen, locks your browser, and displays an urgent warning that your computer has been infected with a virus or malware [2]. The message prominently features the branding of Microsoft, Apple, or Geek Squad, and instructs you to call a phone number immediately [2]. That number connects you directly to a criminal call center, often operating overseas.

Once on the phone, the scammer employs a multi-stage social engineering attack. First, they create panic by describing a severe, fabricated threat. Then they request remote access to your computer — supposedly to 'fix' the problem — which gives them full visibility into your files, passwords, and financial accounts. In a newer and more dangerous variation documented by the FTC, scammers have abandoned the virus story altogether: instead, they claim someone has hacked your bank, investment, or retirement account and is using it for fraud [2]. The 'tech support' call is then handed off to a second scammer posing as a government agent — from the FTC, the FBI, or a bank's fraud department — who instructs the victim to transfer money to a 'safe account' that the criminal controls [2]. Other payment demands include gift card purchases, cryptocurrency transfers, or cash withdrawals [2]. The FBI and Joint law enforcement teams made over 215 arrests in 2024 through 11 international operations targeting fraudulent call centers running exactly these schemes [3].

“In these scams, criminals pose as tech support representatives and offer to fix non-existent issues — all so they can gain access to your wallet and sensitive information.” — Federal Bureau of Investigation, Tech Support Scams

Who Is Being Targeted — and the Answer May Surprise You

It is a common assumption that tech support scams primarily victimize elderly people unfamiliar with technology. The data tells a more complex story. Adults aged 60 and older do suffer disproportionate losses — the FBI's IC3 data confirms this demographic filed the highest number of complaints and suffered the greatest total financial harm in 2024 [3]. For victims over 60, tech support fraud ranked as the second most common and second most costly fraud category [3]. However, a report by Microsoft on tech support scams found that Millennials and Gen Z were actually victimized more frequently than any other demographic group [4]. Scammers are equal-opportunity predators; their tactics are engineered to exploit anxiety and urgency in anyone, regardless of age or technical sophistication.

Warning Signs to Watch For

Recognizing a tech support scam in the moment is the single most effective defense. Here are the red flags every internet user must know:

**Unsolicited pop-ups demanding immediate action.** Legitimate companies like Microsoft and Apple do not send alarming pop-up warnings instructing you to call a phone number. Real security alerts will never ask you to call a number [2]. If a pop-up locks your browser and blares an audio alarm, it is almost certainly a scam.

**Unexpected phone calls claiming to be from tech companies.** Trusted companies will never contact you out of the blue to tell you there is a problem with your computer [3]. Hang up immediately on any unsolicited caller claiming to represent Microsoft, Apple, or any security vendor.

**Requests for remote access.** No legitimate tech company will ask for unsolicited remote access to your device. Granting access gives criminals a direct pathway into everything you own digitally.

**Unusual payment demands.** Any request to pay for 'support services' via gift cards, wire transfer, cryptocurrency, or cash is a definitive sign of fraud [2]. Legitimate businesses do not accept payment this way.

**Escalating urgency and fear.** Scammers deliberately manufacture panic. The louder and more frightening the warning, the more likely it is fake. AI-generated voices and deepfake video are now being used to make these scenarios even more convincing [3].

How to Protect Yourself

Protection begins with skepticism toward any unsolicited contact about your device's security. The FTC recommends that if you are worried about your computer's health, you should update your security software and run a scan independently — never by following instructions from a pop-up or cold caller [2]. Here are the core protective habits every person should build:

**Close the pop-up, do not call the number.** If your browser is locked by a pop-up, force-quit the browser or restart your device. Do not click any links in the pop-up and do not dial any embedded numbers.

**Never grant remote access to unsolicited callers.** This is a firm, non-negotiable rule. Once a scammer has remote access, any data on the machine may be compromised.

**Verify independently.** If you are concerned about a notification that claims to be from Microsoft or Apple, navigate directly to the company's official website or call a number you look up yourself — never one provided in the alert.

**Keep software updated.** Regularly updated operating systems and security software make it far harder for real threats to take hold, reducing your vulnerability to the fear-based manipulation that powers these scams.

**Talk to family members.** Because older adults face outsized risk, having proactive conversations about tech support scam tactics with parents and grandparents is one of the most effective preventive measures available.

What to Do If You Are Targeted

If you have been contacted by a suspected tech support scammer — or believe you have already been victimized — swift action can limit the damage. First, if you granted remote access to your computer, disconnect it from the internet immediately, run a full security scan with reputable software, and change all passwords from a separate, uncompromised device. If you transferred money, contact your bank or financial institution right away; the FBI's Recovery Asset Team was able to help freeze over $561 million in fraudulent transfers in 2024, but time is critical [3].

Report the incident to the FBI's Internet Crime Complaint Center at IC3.gov and to the Federal Trade Commission at ReportFraud.ftc.gov [2][3]. Also notify the legitimate company whose name was used — Microsoft, Apple, or whoever was impersonated — as they maintain fraud reporting channels and can alert other potential victims. Reporting is not just self-protective; the IC3's 2024 data and subsequent enforcement actions, including 215 arrests in joint operations with India's Central Bureau of Investigation, were built directly on victim complaints [3]. Your report may stop the next victim.