Tech Support Scams: The #1 Complaint to State AGs
Quick Summary
Tech support scams have been the #1 complaint to state Attorneys General for five consecutive years, according to the Vermont Attorney General's 2025 annual report. Scammers use frightening pop-up warnings claiming your computer is infected with viruses, or they cold-call pretending to be from Microsoft, Apple, or other tech companies. They convince victims to allow remote access via software like TeamViewer or AnyDesk, then charge $300-$500 for fake "repairs" that often involve installing actual malware. Older adults aged 65+ are primary targets, losing an average of $800 per incident. In 2024, Americans lost over $1.3 billion to tech support scams. The single most important fact: legitimate tech companies will NEVER cold-call you about computer problems.
How Tech Support Scams Work
The Three Main Types of Tech Support Scams
Type 1: Fake Pop-Up Warnings (Most Common)
- You're browsing the internet when suddenly a full-screen pop-up appears claiming your computer is infected with viruses or has been hacked
- The pop-up displays alarming messages: "CRITICAL SECURITY ALERT!" or "Windows Defender Has Detected Malware!" with flashing red text and warning sounds
- A phone number is prominently displayed (often appears to be Microsoft or Apple support)
- You can't close the pop-up - it locks your browser or makes it difficult to exit, creating panic
- You call the number seeking help, connecting you to the scammer
- The "technician" guides you to download remote access software (TeamViewer, AnyDesk, LogMeIn, UltraViewer)
- They access your computer, run fake scans showing fabricated problems, and convince you to pay for unnecessary "repairs"
- They charge $300-$500 (sometimes more) via credit card, wire transfer, or gift cards
- In many cases, they install actual malware to steal passwords, banking information, or maintain access for future scams
Type 2: Cold Calls from "Tech Support"
- You receive an unsolicited call from someone claiming to be from Microsoft, Apple, Dell, HP, or your internet provider
- They claim to have detected problems with your computer or suspicious activity on your account
- They use technical jargon to sound legitimate ("Your IP address shows malware propagation" or "Our servers detected trojan activity")
- They create urgency: "Your banking information is at risk" or "Hackers are accessing your files right now"
- They ask you to turn on your computer and guide you through steps to give them remote access
- Same outcome: fake diagnosis, unnecessary "repairs," charges of $300-$500+, and potential malware installation
Type 3: Search Engine Manipulation
- You search for tech support for a legitimate issue (e.g., "Microsoft support number" or "how to fix printer error")
- Scammers use SEO and paid ads to appear at the top of search results
- You call the fake number, believing it's legitimate support
- The scam proceeds exactly like the pop-up version with remote access and fake repairs
Common Remote Access Tools Used
- TeamViewer: Legitimate business tool, frequently abused by scammers
- AnyDesk: Another legitimate remote access program
- LogMeIn: Professional remote support software
- UltraViewer: Less known but increasingly used in scams
- SupRemo: Remote desktop software
- Chrome Remote Desktop: Even Google's tool is exploited
Important: These are all legitimate programs. The scam is in HOW they're used - tricking you into granting access to criminals.
What Scammers Do With Remote Access
- Run fake scans showing fabricated viruses
- Open Windows Event Viewer (shows normal system logs) and claim warnings/errors are viruses
- Access banking websites you're logged into
- Install actual malware for password theft
- Create backdoor access for future exploitation
- Steal personal documents, tax records, photos
- Lock you out of your computer and demand ransom
- Access saved passwords in your browser
Red Flags: How to Spot Tech Support Scams
Major Warning Signs - If you encounter these, it's a scam:
- 🚩 Unsolicited contact: Microsoft, Apple, and other tech companies NEVER cold-call customers about computer problems
- 🚩 Pop-ups with phone numbers: Real security warnings never include phone numbers
- 🚩 Can't close the warning: Browser-locking pop-ups are always scams
- 🚩 Alarming language: "CRITICAL ERROR," "Your computer has been hacked," "Call immediately"
- 🚩 Request for remote access: Legitimate companies don't ask for remote access unless YOU initiated contact
- 🚩 Pressure and urgency: "Your bank accounts will be compromised in 2 hours"
- 🚩 Request for payment via gift cards: No legitimate company accepts iTunes, Google Play, or Amazon gift cards as payment
- 🚩 Request for wire transfer or cryptocurrency: Red flag for all tech support
- 🚩 Foreign accent but claims to be in U.S.: Many scam operations are overseas
- 🚩 They ask you to pay before seeing the problem: Legitimate support explains issues first
- 🚩 Badge numbers or employee IDs that can't be verified: Scammers make these up
- 🚩 They claim to have detected problems remotely: Companies can't scan your personal computer without your permission
- 🚩 Price seems high: $300-$500 for virus removal is excessive (real cost: $50-150)
- 🚩 They show Windows Event Viewer: Normal system logs scammers claim are viruses
What Real Tech Support Looks Like
- You initiate contact: You call them, not the other way around
- Official channels only: Phone numbers from official websites, not Google search results
- No remote access without permission: They ask if you want remote support, and you must agree
- Clear pricing: Costs are explained upfront
- Payment through normal channels: Credit card through secure systems, never gift cards
- Documentation provided: Service reports, receipts, case numbers
- Professional communication: Calm, patient, answers your questions
- No pressure tactics: They work on your timeline
Who Gets Targeted?
Primary Victims: Older Adults (65+)
58% of victims are seniors
According to the FTC's 2025 data, adults over 65 are disproportionately targeted by tech support scammers. Reasons include:
- Less familiarity with how tech companies actually operate
- More trusting of authority figures
- More likely to have savings scammers can access
- May not have family nearby to consult
- Fear of "breaking" the computer and losing precious photos/documents
Average loss for seniors: $1,200 (higher than general population)
Secondary Targets: Home Computer Users
Anyone who uses a personal computer is at risk, especially:
- People who browse frequently and may encounter malicious pop-ups
- Those working from home with company computers
- Individuals who aren't tech-savvy
- People who have had legitimate tech issues recently (scammers time their calls)
- Those who use search engines to find support numbers
Real Tech Support Scam Cases from 2025
Case 1: The Locked Browser Pop-Up
Victim: 72-year-old retiree, Oregon
Loss: $1,800
Duration: Single incident, 3 hours
Story: While reading news online, a full-screen warning appeared claiming Windows Defender detected 5 viruses and her computer was sending data to China. The screen locked and wouldn't close. A phone number was displayed for "Microsoft Security." She called and spoke with "technician badge #MS-47829" who guided her to download AnyDesk. He showed her Windows Event Viewer with red warnings (normal system logs) claiming these were proof of malware. He ran a fake scan that displayed "37 critical threats detected." She paid $399 for "annual virus protection," then $599 for "firewall installation," then $799 for "identity theft protection package" - all via gift cards purchased at CVS. The scammer maintained access for weeks, monitoring her banking activity. Oregon AG's office helped her report to FBI IC3.
Case 2: The Microsoft Cold Call
Victim: 68-year-old widow, Vermont
Loss: $4,200
Story: Received call from "Microsoft Technical Department" claiming her computer was broadcasting viruses to other computers and Microsoft was receiving error reports. The caller had a foreign accent but used convincing technical language. He said her Windows license would be revoked if she didn't fix the problems immediately. She allowed TeamViewer access. He showed her fabricated scan results and convinced her to pay $1,200 for "comprehensive malware removal." He then claimed to process a refund but "accidentally" deposited $12,000 into her bank account (he showed her bank balance after transferring between her own accounts). He demanded she wire back the "overpayment" of $10,800 or he'd "lose his job and his family would suffer." She wired the money. The entire refund was fabricated using her own money. Vermont AG filed criminal charges against the operation.
Case 3: The Fake Apple Support
Victim: 45-year-old teacher, California
Loss: $650
Story: Searched Google for "Apple support phone number" after having legitimate iCloud storage issues. Called the first number that appeared (a paid scam ad, not Apple's real number). The "Apple technician" convinced her to download LogMeIn and guided her through giving access. He claimed her Apple ID had been "compromised by Russian hackers" and showed her fabricated security logs. She paid $299 for "security package" and $349 for "premium iCloud protection" via credit card. Fortunately, she contacted her bank the next day after discussing with her daughter, and was able to reverse the charges. The fake support number was reported and removed from Google Ads.
Case 4: The Refund Scam Variation
Victim: 79-year-old veteran, Florida
Loss: $18,000
Story: Had fallen victim to a tech support scam six months earlier (paid $400). Received a call from someone claiming to be from the FTC saying he qualified for a refund due to a scam investigation. The caller knew details of his previous scam, making it seem legitimate. The "FTC agent" said to receive his $400 refund, he needed to verify his bank account through remote access software. Once the scammer had access, they showed a bank screen claiming $18,000 was deposited instead of $400. The scammer became frantic, saying it was a mistake and he'd be fired. He pressured the victim to wire back the "overpayment" of $17,600 immediately. The victim withdrew cash and sent it via MoneyGram. The $18,000 deposit was fake - the scammer had manipulated the browser display. Florida AG's Elder Fraud Unit is investigating.
Prevention: How to Protect Yourself
If You Get a Pop-Up Warning
- DO NOT call the number on the screen
- Close your browser completely (Ctrl+Alt+Delete on Windows, Force Quit on Mac)
- If you can't close it, restart your computer
- Run a legitimate antivirus scan (Windows Defender, Malwarebytes, Norton)
- Clear your browser cache and cookies
- Change passwords if you were logged into accounts
If You Get a Cold Call
- Hang up immediately - Microsoft, Apple, etc. DO NOT make unsolicited calls
- Never provide personal information
- Don't engage in conversation (scammers are skilled manipulators)
- Don't press any numbers they suggest
- Block the number
- If you're concerned, contact the company directly using a verified number from their official website
When You Need Real Tech Support
- Go directly to the company's official website
- Use phone numbers from official sources only
- Don't rely on search engine results (scammers buy ads)
- Visit a physical store (Apple Store, Microsoft Store, Best Buy)
- Ask a tech-savvy friend or family member
- Use manufacturer support that came with your device
General Computer Security
- Keep your operating system and software updated
- Use legitimate antivirus software (Windows Defender is free and effective)
- Install an ad-blocker to prevent malicious pop-ups
- Don't click suspicious links or download unknown software
- Use strong, unique passwords for important accounts
- Enable two-factor authentication on banking and email
- Back up important files regularly
- Be skeptical of urgent computer warnings
What to Do If You've Been Scammed
Immediate Actions (Do These Right Away)
- Disconnect from the internet - Unplug Ethernet cable or turn off Wi-Fi to prevent further access
- Uninstall remote access software - Remove TeamViewer, AnyDesk, or whatever they had you install
- Run a full antivirus scan with legitimate software (Windows Defender, Malwarebytes)
- Change all passwords - Especially banking, email, and any accounts you were logged into:
- Do this from a DIFFERENT device if possible (your phone or another computer)
- Use strong, unique passwords
- Enable two-factor authentication
- Contact your bank/credit card company immediately:
- If you provided card information, request new cards
- If you gave them bank account access, consider closing account and opening new one
- Dispute any fraudulent charges
- Set up fraud alerts
- If you sent money:
- Credit card: Dispute charges immediately
- Gift cards: Contact the company (Google, Apple, Amazon) and report fraud - provide card numbers. Recovery is unlikely but report it.
- Wire transfer: Contact your bank and the wire service (Western Union, MoneyGram) immediately. Recovery is very unlikely but must be reported quickly.
- Cryptocurrency: Contact the exchange. Recovery is nearly impossible.
Computer Cleanup (Do This Next)
- Consider professional help: Take computer to Best Buy, local repair shop, or manufacturer store for professional malware removal
- Or DIY cleanup:
- Run Malwarebytes (free version available)
- Run Windows Defender full scan
- Check for unfamiliar programs in Control Panel and uninstall
- Check browser extensions and remove suspicious ones
- Clear browser cache, cookies, and history
- In severe cases, consider factory reset: Back up important files, then reset computer to factory settings
- Monitor accounts: Check bank statements, credit reports for months after the incident
How to Report Tech Support Scams
| Agency | Purpose | How to Report |
|---|---|---|
| Federal Trade Commission | All tech support scams | ReportFraud.ftc.gov |
| FBI Internet Crime Complaint Center (IC3) | Cyber fraud and tech support scams | IC3.gov |
| State Attorney General | Consumer fraud protection (#1 complaint) | Find your state AG |
| Microsoft | If scammer claimed to be from Microsoft | microsoft.com/concern/scam |
| Apple | If scammer claimed to be from Apple | apple.com/legal/report-scams |
| Your Local Police | For large losses or ongoing threats | Visit station or call non-emergency line |
What Information to Provide When Reporting
- Phone number(s) the scammer used
- Name(s) the scammer provided
- Company they claimed to represent
- Remote access software used (TeamViewer, AnyDesk, etc.)
- Amount of money lost and payment method
- Dates and times of contact
- Any email addresses or websites involved
- Screenshots of pop-ups or conversations (if available)
- Gift card numbers if you paid via gift cards
Why Tech Support Scams Are So Successful
Psychological Manipulation
Scammers are experts in psychological manipulation:
- Fear: "Your computer is infected! Hackers have your data!"
- Urgency: "You must act now or lose everything!"
- Authority: Pose as trusted companies (Microsoft, Apple)
- Confusion: Use technical jargon to overwhelm victims
- Trust: Sound professional, patient, and helpful
- Isolation: Keep victim on phone to prevent consulting others
Technical Deception
Scammers use legitimate-seeming technical tactics:
- Windows Event Viewer: Show normal system logs, claim they're errors
- Fake scans: Display fabricated virus detection results
- Browser manipulation: Change displays to show fake balances
- Real software: Use legitimate remote access tools
- Professional websites: Create convincing fake support sites
- Caller ID spoofing: Display "Microsoft" or real company names
The Numbers: Why This Scam Persists
$1.3 billion lost in 2024
- Average loss per victim: $800
- Most common age group: 65+ (58% of victims)
- Success rate: 1 in 30 people who engage with scammers pay them
- Reporting rate: Only 15% of victims report (embarrassment is a factor)
- Global operation: Most call centers are in India, Pakistan, Philippines
- Low overhead: Scammers only need computers and phone lines
- High profit margin: Charging $300-$500 for services that cost them nothing
Law Enforcement Actions & Prosecutions
Major 2025 Enforcement Actions
FTC Operation: "Tech Trap Shutdown"
Date: September 2025
Result: 47 tech support scam operations shut down, $38 million in consumer refunds
The FTC coordinated with state AGs to target the largest tech support scam networks. Obtained court orders freezing assets and banning defendants from providing tech support services. This was the largest-ever coordinated action against tech support fraud.
Department of Justice: International Scam Ring
Date: March 2025
Arrests: 23 individuals in India, 7 in the United States
Charges: Wire fraud, conspiracy to commit fraud
DOJ worked with Indian authorities to dismantle a network of call centers that defrauded over 10,000 Americans out of $75 million. Defendants face up to 20 years in prison.
Vermont Attorney General: Local Prosecution
Date: November 2025
Vermont AG successfully prosecuted two U.S.-based individuals who were coordinating with overseas scammers. They received bank transfers from victims and took a percentage before sending money overseas. Both sentenced to 5 years in state prison.
Protect Others: Share This Information
Help Prevent More Victims
Tech support scams particularly target seniors who may not be aware of how these frauds work. You can help:
- Talk to older family members about tech support scams
- Install ad-blockers on their computers to prevent malicious pop-ups
- Post the FTC number near their computer: Official Microsoft support is 1-800-MICROSOFT (1-800-642-7676), Apple is 1-800-MY-APPLE (1-800-692-7753)
- Set up their computer to auto-update and use Windows Defender
- Be their tech support contact - tell them to call you first with computer issues
- Enable call blocking on their phone to reduce scam calls
- Share this guide with friends, family, and community groups