• Overview
    • Scam Map
    • Kill Chain
Recents

    Conversations will appear here

Technique

Tech Support Scam

Also known as: Computer Support Scam, Microsoft Scam, Windows Support Scam, Technical Support Fraud, Refund Scam, Fake Tech Support

DELIVERY

Impersonating technical support representatives from companies like Microsoft, Apple, or ISPs to convince victims their computer is compromised, then extracting payment or installing remote access tools.

Common attack flows

How it fits in a scam

This technique shows up duringDELIVERY

Before

  • Pop-up ScarewareDELIVERY
  • SEO PoisoningDELIVERY
  • MalvertisingDELIVERY
  • Social Media ReconnaissanceTARGETING
  • +1 more

After

  • Remote Access ToolPERSISTENCE
  • Gift Card ExtractionMONETIZATION

Defense

How to defend against this

How to spot it

  • Unsolicited calls claiming your computer is infected or compromised
  • Pop-ups displaying phone numbers to call for immediate support
  • Requests to install remote access software like AnyDesk or TeamViewer
  • Caller claims to be from Microsoft, Apple, or your ISP without you initiating contact
  • Payment requested via gift cards, wire transfer, or cryptocurrency
  • High-pressure tactics about urgent security threats
  • Fabricated errors shown via Event Viewer or fake virus scan results

Tools you can use

  • Antivirus SoftwareCost low · Effect medium
  • Call ScreeningCost low · Effect medium

Steps you can take

  • Official Channel VerificationCost low · Effect high

Further reading

  • Malwarebytes

    Consumer guide to tech support scam tactics and protection

  • Scamwatch Australia

    Government consumer warning on remote access scams

Related techniques

Variants

  • Vishing

Same stage

  • Phishing Email
  • Smishing
  • Deepfake Voice Call
  • SEO Poisoning
  • Quishing
  • +15 more

Similar defense

  • Remote Access Tool
  • Clipboard Hijacking
  • Malicious App Installation
  • Social Media Reconnaissance
  • Supply Chain Compromise
  • +12 more