How to Spot and Avoid Tech Support Scams
Practical rules and real-world examples to protect your office workstations, data, and bank accounts from fraudulent security warnings.
Deceptive Warnings Designed to Create Panic
Tech support scams are among the most common cyber threats targeting small business owners and home computer users. These scams rely on psychological panic rather than actual system infections.
A malicious website or rogue advertisement will suddenly hijack your browser, generate loud siren sounds or automated voice instructions, and lock your screen with alarming messages claiming your computer is infected with severe spyware or trojans.
Remember the golden rule: Microsoft, Apple, Google, and your internet service provider will never freeze your screen, send unrequested pop-up warnings demanding phone calls, or place toll-free phone numbers in error dialogs.
What to Do If a Scam Screen Appears
What to Do If a Scam Screen Appears
- Do Not Call the Number: Under no circumstances should you call phone numbers displayed on unexpected browser pop-ups or error screens.
- Close Your Web Browser Safely:
- Press
Ctrl + Shift + Escon your keyboard to open the Windows Task Manager. - Find your web browser (Google Chrome, Microsoft Edge, Firefox) in the list.
- Click on the browser and click End task in the top right corner.
- When reopening your browser, click “Don’t Restore” if prompted to reopen previous tabs.
- Press
- Never Grant Remote Access to Unknown Callers: Legitimate tech support companies will never contact you out of the blue demanding remote control of your computer.
What to Do If You Were Targeted or Granted Access
Step 1: Disconnect Internet Immediately: Unplug your Ethernet cable or turn off Wi-Fi to sever any active connection.
Step 2: Contact Your Financial Institutions: If you provided credit card details or bank logins, call your bank immediately to freeze accounts and dispute unauthorized charges.
Step 3: Update Account Passwords: From a separate, clean device, update passwords for your primary email, banking portals, and cloud services. Enable multi-factor authentication (MFA).
Step 4: Have the Workstation Professionally Audited: Have an experienced IT technician thoroughly scan and audit the computer to remove installed remote access backdoors, keyloggers, and malicious startup tasks.
Email Phishing, Wire Fraud & Fake Invoice Scams
Protecting Your Business from Email Deception
Email remains the primary vehicle for high-stakes business fraud. Modern cybercriminals craft convincing emails that closely mimic real banks, vendors, title companies, and government agencies to trick you into clicking links or transferring funds.
- Caution with Email Links and Attachments: Never click links or open unexpected attachments (such as
.zip,.html, or macro-enabled.docfiles) in unverified emails. Hover your mouse over the sender address and links to verify the actual destination URL before interacting. - Escrow, Real Estate & Payroll Wire Redirects: Scammers target real estate transactions and business accounting departments by compromising email accounts and sending “updated wire instructions” right before closing or payroll processing. Always verbally verify any bank routing change using an established, independent phone number.
- Tech Support “Refund” & Overpayment Traps: Fraudulent emails claim your subscription (such as antivirus software, Geek Squad, or Microsoft 365) automatically renewed for hundreds of dollars. When you call their fake cancellation number, they pretend to “refund” you, claim they accidentally transferred too much money, and demand you send the difference back.
- Fake Check Deposit Scams: A classic scheme targeting contractors, service businesses, and freelancers. A prospective client reaches out with an urgent project request, claims they cannot meet in person due to hospitalization or travel, and FedExes an official-looking cashier’s check for far more than the deposit amount. They then ask you to wire the “overpayment” to a third-party vendor (such as a fake property inspector or shipping agent). Days later, the original check bounces, leaving you personally responsible for all wired funds.
- Fake Book Publishing & Vanity Press Traps: Predatory operations reach out to independent writers, bloggers, or retirees claiming an “acquisitions team” discovered their manuscript, article, or self-published work. They promise nationwide distribution, film adaptations, or bookstore placement, only to demand thousands of dollars in upfront “editing, layout, and marketing package” fees for worthless digital templates.
Phone, Text & Impersonation Schemes
Spotting Common Impersonation & Social Engineering Traps
Scammers frequently use spoofed caller IDs, SMS text messages (“smishing”), and emerging AI tools to create intense emotional pressure or excitement, tricking victims before they have time to verify facts.
- AI Voice Cloning & Fake Emergency Traps: Scammers use short audio samples scraped from social media or voicemails to clone a family member’s voice with AI. A panicked caller pretending to be your child, grandchild, or relative claims they are in jail after an accident, or stranded in a foreign country without a passport, and desperately begs you to wire bail money or legal fees immediately. Always hang up and call the relative back directly on their trusted personal phone number to verify before sending money.
- Fake Lottery & Sweepstakes Wins (Publishers Clearing House): Calls, letters, or texts claiming you have won millions in a foreign lottery or the Publishers Clearing House sweepstakes. Scammers claim a “prize patrol” is ready to deliver a check or luxury vehicle, but insist you must first pay upfront “customs fees, state taxes, or delivery insurance” via wire, crypto, or gift cards. Legitimate sweepstakes never require winners to pay a fee to collect prize money.
- Government & Law Enforcement Impersonation (IRS, SSA, US Marshals, Local Sheriff): Threatening calls, automated robocalls, or texts claiming your Social Security number is suspended, that an arrest warrant has been issued, or that you owe back taxes. Official government agencies correspond through the United States Postal Service and will never demand immediate payment over the phone or threaten immediate arrest.
- Crypto & Unsolicited Investment Schemes: Direct messages on WhatsApp, Telegram, or text from strangers (often starting with a fake “wrong number” greeting) pitching guaranteed daily returns on cryptocurrency or foreign currency (Forex) trading platforms. These platforms display fictitious account gains, but block all withdrawal requests unless you pay heavy “release fees.”
- Remote Job & Equipment Purchasing Scams: Unsolicited job offers conducted solely over text or messaging apps. Victims are “hired” without an interview and sent a counterfeit check to buy home office supplies from a fraudulent vendor website operated by the scammer.
- Romance & Extortion Schemes: Bad actors fabricating online personas to build romantic trust over weeks or months. Once emotional rapport is established, they concoct sudden medical, travel, or legal emergencies requiring urgent financial help, or threaten extortion unless paid in cryptocurrency.
Unsure If an Alert or Message Is Legitimate?
When in doubt, stop and verify. Speak directly with Michael Challis for a trusted system security audit or remote diagnostic check.