How do I recognize and respond to a tech support scam?
Answer
End contact immediately, do not pay by gift card or wire, and do not install remote-access apps for unexpected “support.” Change passwords on official sites if you shared anything, then report the incident to your bank or platform.
Before you start: stop right away if…
- Real companies will not demand gift cards, cryptocurrency, or secrecy to “fix” your computer.
Follow these steps
Cut off the scammer
Hang up, close the browser popup, and uninstall any remote-access app they had you install (TeamViewer, AnyDesk, Quick Assist sessions you did not initiate).
You should see: The live scam session ends and remote control stops.
Stop payments and alert your bank
If you paid or shared card details, contact your bank or card issuer through the number on the card and report fraud. Ask them to cancel cards and reverse recent scam charges when possible.
You should see: The issuer freezes exposure and documents the fraud report.
Secure important accounts
On official sites only, change email and banking passwords and turn on two-factor authentication. Review forwarding rules and recent logins.
You should see: Accounts show your new security settings and no unknown forwarding.
Report the scam
Report to the platform involved (app store, marketplace, or carrier) and to your local consumer fraud reporting channel. Keep screenshots of numbers and payment receipts.
You should see: You have a record of the report for chargebacks and follow-up.
Not sure this is the right page? Check here
0 of 5 checked
Extra tips
What to look for: Unsolicited calls/popups; requests for gift cards, crypto, or remote access; urgency and secrecy; mismatched company phone numbers.
Before you change anything: Disconnect the call or close the popup. Do not argue or “play along” with payment. Use a different device to check accounts if malware is suspected. Never share one-time codes.
Need a little more help?
Tell us what’s happening. Your saved expert chat will open beside this article.
Free to use. Don’t include passwords or personal details.