How to spot a fake tech support scam

The caller says your computer is infected. The pop-up says your subscription expired. Both want the same thing: the keys to your machine. Fake tech support remains one of the most profitable scams around, and it runs on a script you can learn in five minutes.

How the scam unfolds

The script rarely changes. It moves through four steps.

• Unsolicited contact: a phone call, a full-screen alert or an email that mimics a well-known vendor.
• A technical pretext: a virus, an expired subscription, a refund waiting to be claimed.
• Manufactured urgency: act now, or the device or account gets locked.
• The ask: install a remote-access tool, read out a code, pay a fee.

The endgame is constant: get inside the machine, get inside the accounts, or get the money.

Why it keeps working

The scam leans on two things: trust in familiar brands and fear of losing data. A pop-up that imitates an antivirus looks official. A voice announcing a virus sounds competent. Nobody is immune, but knowing the script removes the scammer’s main lever: surprise.

Red flags that never lie

• Legitimate support never calls first. Microsoft, Apple, your bank and your carrier do not cold-call customers about viruses.
• Payment in gift cards or prepaid vouchers is always a scam. No serious company collects money that way.
• A request to open your online banking during the session is a major alarm.
• Artificial urgency: any pressure that stops you from hanging up serves the scammer, not you.

What a real support session looks like

With a legitimate tool like Ubidesk remote support, the mechanics reverse. You asked for help, and you stay in control the whole time.

• The session starts with a 6-digit code you enter yourself.
• Nothing to install: the temporary client runs on the spot, without administrator rights.
• No file enters or leaves your machine without your explicit confirmation. That rule has no exceptions.

Lay these three points next to the scam script and every step is inverted, including the direction of trust.

How the Trust Layer filters abuse

The Ubidesk Trust Layer exists for exactly this scenario. Every point below is automatic: nothing to configure, nothing to remember.

• Businesses operating through Ubidesk pass a KYB identity verification before they can contact anyone.
• The technician carries a verified badge, visible before you accept the session.
• Any unsolicited session triggers a warning first.
• Banking sites and password fields are automatically blurred during the session.
• Alerts fire on suspicious behaviour: opening online banking, mentioning gift cards.
• One click reports an abuse.

Teach the script to your family

The four red flags above make a two-minute lesson. Say it once, repeat it when you visit, and write the rule on a sticky note: real support never calls first, and real companies never take gift cards. That single habit blocks most attacks.

What to do when the call comes

Before anything: hang up. Never call back a number shown in an error window. Reach the vendor’s official support through a channel you already know.

If a session already happened: disconnect the machine from the network, change passwords on sensitive accounts and call your bank if credentials may have been exposed. Keep the traces, number and screenshots, and report them.

For relatives who are less comfortable with computers, the strongest protection is a trusted tool installed before the problem exists. Our pages for individuals walk through the setup step by step. Fifteen minutes of preparation beats an hour of panic later.