--- title: "Tech Support Scams: Fake Pop-Ups & Refund Traps" description: "Fake Microsoft and Apple pop-ups, remote access, and the refund-overpayment trick. How tech support scams work, how to close the pop-up safely, and how to recover." url: "https://www.saferetirewatch.com/scams/tech-support-scams" date_modified: "2026-07-31" language: "en-US" keywords: "tech support scams, fake microsoft pop up, apple security alert scam, remote access scam, refund scam, geek squad scam, computer virus warning scam" publisher: "Safe Retire Watch" --- # Tech support scams **Direct answer:** A tech support scam starts with an alarming pop-up, email, or call claiming your computer is infected or a subscription is renewing, and ends with a stranger controlling your screen. Microsoft, Apple, and Best Buy never display a phone number in a security warning. Close the pop-up without calling, and never grant remote access to anyone who contacted you first. - **Instant tell:** A security warning that includes a phone number — real ones never do - **Remote tools abused:** AnyDesk, TeamViewer, UltraViewer, LogMeIn, and screen-share links - **Second act:** The 'refund overpayment' trick, where a faked balance convinces you to send money back - **Safe exit:** Close the browser or restart the computer — the pop-up is a web page, not a virus ## How does a tech support scam unfold? 1. A full-screen pop-up appears with sirens, flashing text, and a warning not to shut down. It is a web page designed to look like a system alert. 2. You call the number. A polite technician confirms your worst fear and offers to check the machine. 3. They ask you to install remote access software. Once connected, they show Event Viewer logs or a netstat window as fake proof of infection. 4. They charge for cleanup, a lifetime protection plan, or a fake antivirus subscription — often several hundred dollars. 5. Weeks later, a 'refund department' contacts you, claims the company is closing, and processes a refund. They edit what appears on your banking screen so it looks like too much was deposited, then ask you to return the difference in gift cards or crypto. Nothing was ever deposited. ## How do I get rid of a scam pop-up safely? 1. Do not call the number, and do not click buttons inside the window, including 'Close' or 'Cancel.' 2. Press Escape to leave full-screen, then close the tab. On Windows, use Ctrl+Alt+Delete and end the browser task; on Mac, use Command+Option+Escape and force quit the browser. 3. If audio keeps playing, restart the computer. That alone ends the vast majority of these pop-ups. 4. Reopen the browser and decline to restore previous tabs. 5. Clear the browser cache, and check that no unfamiliar extension was installed. 6. If you already granted remote access, disconnect from Wi-Fi, uninstall the remote tool, change your passwords from a different device, and have the machine inspected before banking on it again. > **Real security warnings never have a phone number** > > Windows Defender, Apple, Google Chrome, Norton, and McAfee do not display support phone numbers in warnings. The phone number is the scam. ## What about renewal emails from Geek Squad, Norton, or McAfee? These are the email version of the same operation. The invoice shows a charge of a few hundred dollars for a product you do not remember buying, and the only way to 'cancel' is to call their number. The goal is either remote access or the refund-overpayment routine. Verify by checking your card statement and your account on the vendor's real website. If no charge exists, there is nothing to cancel. ## What should I do if I paid or gave access? 1. Call your card issuer or bank fraud line and dispute the charge as fraud; report any gift card purchases to the retailer immediately. 2. Change your email and banking passwords from a clean device, and enable two-factor authentication. 3. Remove remote-access software and run a scan with your built-in security tool, or have a trusted technician review the device. 4. Watch for follow-up calls — victim lists are resold, and the 'refund' call is the most profitable stage of all. 5. Report to ReportFraud.ftc.gov and, if losses are significant, to ic3.gov. ## Frequently asked questions ### Will Microsoft or Apple ever call you about a virus? No. Microsoft and Apple do not make unsolicited calls about infections, and they do not put support phone numbers in security pop-ups. Any inbound call or on-screen warning claiming your device is infected and offering a number to call is fraudulent, including ones that display your correct name or an accurate-looking case ID. ### Is my computer infected if I saw a scam pop-up? Usually not. Scam pop-ups are ordinary web pages using full-screen tricks and audio, delivered through advertising. Closing the browser or restarting the computer removes them. The real risk begins only if you called the number, installed remote-access software, or entered credentials — in that case, change passwords from another device and have the machine checked. ### What is the refund overpayment scam? After a fake tech support charge, a 'refund department' calls to return your money. With remote access to your screen, they alter what appears in your online banking display so it looks like they mistakenly sent thousands too much, then plead for the difference back in gift cards or cryptocurrency. No money ever arrived — you would be sending your own funds. Hang up and call your bank directly. ## Sources - Federal Trade Commission — [How to spot, avoid, and report tech support scams](https://consumer.ftc.gov/articles/how-spot-avoid-and-report-tech-support-scams) - Microsoft — [Protect yourself from tech support scams](https://support.microsoft.com/windows/protect-yourself-from-tech-support-scams-2ebf91bd-f94c-2a8a-e541-f5c800d18435) - CISA — [Avoiding social engineering and phishing attacks](https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks) ## Related pages - [Tech support scam guide](https://www.saferetirewatch.com/blog/tech-support-scam) - [Geek Squad scam email guide](https://www.saferetirewatch.com/blog/geek-squad-scam-email) - [Microsoft scam email guide](https://www.saferetirewatch.com/blog/microsoft-scam-email) - [Phishing scams hub](https://www.saferetirewatch.com/scams/phishing-scams) --- Source: https://www.saferetirewatch.com/scams/tech-support-scams — Safe Retire Watch.