“Microsoft called me”: how the tech-support scam works and what to do if you fell for it

First, the most important sentence on this page: it happens to smart, careful people every single day, and there is no lecture waiting for you here. These operations are professional call centers with scripts refined on millions of victims. Feeling stupid is part of their product design — it's what keeps people from getting help fast, and fast matters.

How the scam works

It usually starts one of two ways: a full-screen browser popup with an alarm sound saying your computer is infected — "Call Microsoft: 1-800-XXX-XXXX" — or a cold phone call from "Microsoft," "Amazon," or "your bank's security department." Microsoft will never call you, and no legitimate popup ever includes a phone number.

The caller asks to connect to your computer "to check." They run official-looking scans (actually harmless commands dressed up scary), announce infections, and sell you a fix: hundreds of dollars, often via gift cards or a "refund" trick where they pretend to overpay you and ask for the difference back.

If they connected to your computer — do these in order

1. Disconnect the computer from the internet. Pull the network cable or turn off Wi-Fi. Their software may still be installed and running.
2. From a DIFFERENT device (your phone is fine), change the passwords for your email first, then banking. Email first — whoever controls your email can reset everything else.
3. Call your bank or card company if you paid or they saw a screen with account numbers. Card payments can usually be disputed. Say the words "tech support scam" — they have a procedure for it.
4. If you paid by gift card, call the gift card company with the card numbers — recovery is rare but sometimes possible if it's fast.
5. Don't use the computer for anything sensitive until it's been cleaned. Their remote-access software often stays behind, and it lets them return whenever they like.

Getting the machine trustworthy again

Scam cleanup is $71: Joe removes whatever remote-access tools they installed, checks what they touched while connected, hardens the machine, and walks you through which accounts actually need attention — with a written list, in plain English. Most cleanups are done same or next day, and it can often be handled by secure remote support where you watch every move on your own screen (yes, the irony is noted — the difference is you watching, in control, with the code, able to end it instantly).

Call or text (818) 403-5335. If you're mid-scam right now — they're on the phone or connected this minute — hang up on them, pull the plug, and call. That one's free.