Tech Support Scams

What Is Tech Support Scams?

A full-screen browser alert says your machine is infected and gives a number to call. None of it is real: it is a web page, and the panic it produces is the whole attack. Anyone who calls reaches a scammer who talks them past the antivirus, into installing remote access software, and into paying for fake protection. You'll follow that call to the end, spot the red flags you missed, then contain the damage: call real IT, file a report, and freeze the card.

What You'll Learn in Tech Support Scams

• Identify fake virus alerts, browser lockscreen tactics, and scare-based social engineering
• Recognize why closing the browser tab, not calling the number, is the right first move on a fake virus alert
• Recognize how remote access tools are abused by fraudulent tech support operators
• Distinguish between legitimate IT support procedures and tech support scam behaviors
• Execute the correct recovery steps after a scam call: contact IT Security, file an incident report, and freeze the compromised card

Tech Support Scams — Training Steps

1. A Busy Quarter-End

   It's Thursday afternoon. You're working on the Q1 performance report for a major client. The deadline is tomorrow and you still need to cross-reference some statistical benchmarks. You decide to look up some industry data on a reference site you've used before.

2. Browsing for Data

   Alice opens StatReference, a statistics resource site she's used many times. While scanning the page for relevant datasets, a small notification pops up in the corner of the screen. It looks like a Windows system alert - complete with a shield icon and urgent red text.

3. The "Virus Alert"

   The browser redirects to a terrifying full-screen warning page. Flashing red borders, a Windows Defender logo, and 'CRITICAL THREAT DETECTED' in massive text. The page lists several active threats and claims Alice's personal data is at risk of being stolen. A phone number is displayed prominently: 1-888-330-4127 - 'Call Microsoft Certified Support Immediately.'

4. Calling for Help

   Alice's heart is racing. Her client report contains sensitive financial data - if her computer is truly infected, the client's data could be compromised. With the deadline looming and fear clouding her judgment, she grabs her phone and dials the number from the warning.

5. "Microsoft Certified Support"

   Someone picks up after a single ring. He introduces himself as Ryan, a certified technician, and immediately claims Alice's computer has been flagged with critical threats. His tone is calm, professional, and reassuring.

6. The Remote Access Pitch

   Ryan escalates the urgency, claiming Alice's system needs an immediate remote diagnostic. He directs her to download a specific tool so he can analyze the threats remotely.

7. Downloading the Tool

   Alice opens the URL Ryan provided. The page looks professional - a shield logo, 'Microsoft Partner' and 'Norton Verified' badges, and a prominent download button for 'SecureAssist Pro.'

8. Running the Installer

   The download completes quickly. Alice opens her file manager and double-clicks the file to install it, eager to get the 'diagnostic' running so Ryan can fix the problem.

9. The Antivirus Warning

   The moment Alice runs the file, her antivirus software springs into action. A red alert appears: the file contains a Remote Access Trojan. Ryan, still on the line, has a ready explanation and wants the warning gone. He sounds so confident that Alice begins to doubt her own antivirus. Against her instincts, she decides to dismiss the warning and let the 'technician' proceed.

10. Overriding Protection