How to Recognize a Microsoft Tech Support Scam in 2026

Your mother is sitting at her computer when a loud alarm sounds and a message fills the screen: "YOUR COMPUTER HAS BEEN COMPROMISED. Call Microsoft Support immediately at 1-800-XXX-XXXX." A robotic voice repeats the warning. The browser seems frozen. In a panic, she calls the number.

What follows is a meticulously rehearsed performance. A "technician" with a professional manner takes remote control of her computer, shows her "evidence" of infection, and ultimately convinces her to pay $399 for a lifetime protection plan — via wire transfer or gift cards, of course.

This scenario plays out thousands of times every day across America. The FTC reported that tech support scams cost consumers over $924 million in 2024, with adults over 60 accounting for nearly 58% of reported losses. The average loss for a senior victimized by a tech support scam: $1,400.

How the Scam Begins

Microsoft tech support scams typically begin in one of three ways:

• Browser lock pages: A malicious website or ad triggers a full-screen warning that appears to freeze the browser. These pages use JavaScript tricks to prevent normal navigation and often play audio alarms.
• Popup ads: Legitimate websites sometimes display ads from compromised ad networks. These ads redirect to scam pages without any user action beyond visiting the site.
• Unsolicited phone calls: Scammers cold-call seniors claiming to be from "Microsoft Windows Support" and report that their computer is sending error signals to Microsoft's servers.

In all three cases, the scammer creates urgency. Your computer is about to crash. Your bank accounts are at risk. Hackers are accessing your files right now. This urgency is engineered to prevent victims from pausing to think critically or consult a family member.

What They Say: The Script

Professional scam operations use polished, rehearsed scripts. Knowing the language they use makes recognition much easier. Common phrases include:

• "We've been detecting unusual activity from your IP address."
• "Your Windows license has expired and your computer is sending error reports."
• "We need to connect remotely to stop hackers from accessing your bank account."
• "This service is completely free — Microsoft provides this as part of your warranty."
• "You'll need to purchase a protection plan to remove the malware we found."

"Microsoft will never proactively reach out to you to provide unsolicited PC or technical support. If you receive an unsolicited call, email, or pop-up message, do not engage." — Microsoft official statement

This is the most important thing to understand: Microsoft does not monitor individual computers for viruses. They do not call customers. They do not send popup warnings with phone numbers. If any of these things happen, it is a scam — 100% of the time.

The Remote Access Trap

Once a senior calls the number, scammers typically ask them to download a legitimate remote access tool like AnyDesk or TeamViewer. These are real, legitimate programs — which is what makes them dangerous. Once inside, scammers do several things:

1. Open the Windows Event Viewer and show the victim normal system logs, claiming they represent evidence of hacking (they don't).
2. Open the Command Prompt and run commands that display meaningless technical output, again framed as proof of infection.
3. Navigate to the victim's banking website to "check for unauthorized transactions" — while noting account balances.
4. Claim to "clean" the computer while actually doing nothing (or installing real malware for future use).

The combination of technical-looking activity and authoritative tone convinces many victims — including highly intelligent people — that the threat is real.

How They Collect Payment

Scammers prefer payment methods that are fast, irreversible, and hard to trace:

• Gift cards: Google Play, iTunes, Steam, and Amazon gift cards are most common. They ask for the card numbers over the phone.
• Wire transfers: For larger amounts, they'll direct victims to wire money to overseas accounts.
• Cryptocurrency ATMs: Increasingly, victims are instructed to withdraw cash and deposit it at a Bitcoin ATM.
• Zelle and Venmo: Some scammers now use peer-to-peer payment apps, claiming to be setting up a "Microsoft account."

When a victim pays with a gift card, the money is typically laundered within minutes. There is almost no possibility of recovery.

The Warning Signs: A Quick Reference

Teach these signs to every senior in your family:

• Any popup or screen with a phone number claiming to be Microsoft, Windows, or any tech company
• Any unsolicited call from "Microsoft," "Windows Support," or "tech support"
• Any request to download software to give someone remote access to the computer
• Any request for payment via gift cards, wire transfer, or crypto
• Any claim that your computer is infected and needs immediate action

What to Do When It Happens

If your parent encounters a scam warning page, these steps resolve it immediately:

1. Close the browser window. If it won't close, force-quit the browser from Task Manager (Ctrl+Alt+Delete on Windows).
2. If the computer seems truly frozen, hold the power button for 5 seconds to force shutdown.
3. Do NOT call any number displayed on screen.
4. After restarting, run a legitimate antivirus scan with Windows Defender or Malwarebytes.
5. Call a family member before doing anything else if uncertain.

If your parent has already engaged with a scammer and shared information or payment, see our guide on what to do if your parent already called a scam number for immediate next steps.

Prevention: Making Your Parent Scam-Resistant

The best protection combines software and education. On the software side, tools like GrannySafe detect and block scam pages before they even load — preventing the alarming experience that leads to victims calling fake numbers. On the education side, one simple rule covers most situations: if a computer screen shows a phone number and tells you to call it, don't.

For more comprehensive protection strategies, read our guide on setting up safe browsing for elderly parents and our overview of the 10 most common online scams targeting seniors.