Active Incident? 24/7 Response →
SleuthX

Beware of recovery scams

No legitimate service can guarantee it will get your money or account back for an up-front fee.

  • The FBI warns that “recovery scheme fraudsters charge an up-front fee and either cease communication with the victim after receiving an initial deposit or produce an incomplete or inaccurate tracing report and request additional fees to recover funds.” These schemes deliberately target people who have already been scammed once.
  • Never pay an up-front feeto a company that contacts you promising to recover lost funds, accounts, or cryptocurrency — especially if they ask for payment in gift cards, wire transfer, or cryptocurrency.

FBI sources: IC3 Public Service Announcement I-081123-PSA · FBI San Diego — Seizes Cryptocurrency Recovery Websites

For Individuals & Families

Tech-Support Scams: The Fake "Your Computer Is Infected" Call

No real company freezes your screen and tells you to call a number. Here is how the fake-support scam works, and the steps to take if you already gave them access.

All articles·7 min read·June 29, 2026

What it is

A tech-support scam convinces you that your computer is infected or compromised so that a fake “technician” can take control, steal money, or install malware. It starts with a scary pop-up, an unexpected call claiming to be Microsoft or Apple, or a fake security alert. The losses are not small: the FBI reports victims lose over $1B a year to tech- and customer-support fraud, and older adults are hit hardest.

How it works

  1. The lure. A full-screen browser warning with an alarm and a “support” number, or a cold call about a “virus” or “suspicious login.”
  2. The access. They talk you into installing remote-access software so they can “fix” the problem — and now they can see your screen and files.
  3. The theft. They show you fake “evidence” of hacking, then charge for fake repairs, or stage a fake “refund” that tricks you into sending money or buying gift cards.

How to tell it is fake

If you already let them in

  1. Disconnect the device from the internet and power it off.
  2. From a different trusted device, change your email password first, then bank and other key accounts; turn on two-factor authentication.
  3. Call your bank if you paid anything or shared card details, and dispute charges.
  4. Clean the machine with trusted security software or a reputable local technician.
  5. Report at ic3.gov and reportfraud.ftc.gov.

If the intruder reached real accounts or money, account compromise recovery covers locking an attacker out, and elder fraud investigation helps when an older relative was the target.

See also: Scam & Fraud Recovery Help — the hub that maps every scam type and the free reporting steps.

Sources

  1. FBI Internet Crime Complaint Center (IC3), 2024 Internet Crime Report — tech-support / customer-support fraud, 2024. https://www.ic3.gov/AnnualReport/Reports/2024_IC3Report.pdf
  2. U.S. Federal Trade Commission — Consumer Advice, How to spot, avoid, and report tech support scams. https://consumer.ftc.gov/
  3. FBI Internet Crime Complaint Center (IC3), File a Complaint. https://www.ic3.gov/

Related services

Meet Your Practitioner

Quinnlan Varcoe

Founder & CEO

GIAC-certified · 15 industry certifications

With operational experience across Fortune 50 security programs and the defense industrial base, Quinnlan founded SleuthX in 2022 to provide clients with the caliber of expertise typically reserved for the largest enterprises. Her work in threat intelligence and digital forensics has earned the trust of 26,000+ cybersecurity professionals who follow her analysis.

“26,000 professionals follow my work because I say what others won't — and I can back it up technically.”

Fortune 50 BackgroundDefense IndustryThreat IntelligenceDigital PrivacyIncident Response
Quinnlan Varcoe, Founder & CEO

Tech-support scams: quick answers

Certified Expertise

GIAC · AWS · Splunk · CompTIA

Transparent pricing

Trusted by partners across the practice

DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management
DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management