Active Incident? 24/7 Response →
SleuthX

Beware of recovery scams

No legitimate service can guarantee it will get your money or account back for an up-front fee.

The FBI warns that “recovery scheme fraudsters charge an up-front fee and either cease communication with the victim after receiving an initial deposit or produce an incomplete or inaccurate tracing report and request additional fees to recover funds.” These schemes deliberately target people who have already been scammed once. Never pay an up-front feeto a company that contacts you promising to recover lost funds, accounts, or cryptocurrency — especially if they ask for payment in gift cards, wire transfer, or cryptocurrency. FBI sources: IC3 Public Service Announcement I-081123-PSA · FBI San Diego — Seizes Cryptocurrency Recovery Websites

For Individuals & Families

Tech-Support Scams: The Fake "Your Computer Is Infected" Call

No real company freezes your screen and tells you to call a number. Here is how the fake-support scam works, and the steps to take if you already gave them access.

All articles·7 min read·June 29, 2026

What it is

A tech-support scam convinces you that your computer is infected or compromised so that a fake “technician” can take control, steal money, or install malware.

It starts with a scary pop-up, an unexpected call claiming to be Microsoft or Apple, or a fake security alert.

The losses are not small: the FBI reports victims lose over $1B a year to tech- and customer-support fraud, and older adults are hit hardest.

How it works

  1. The lure. A full-screen browser warning with an alarm and a “support” number, or a cold call about a “virus” or “suspicious login.”
  2. The access. They talk you into installing remote-access software so they can “fix” the problem — and now they can see your screen and files.
  3. The theft. They show you fake “evidence” of hacking, then charge for fake repairs, or stage a fake “refund” that tricks you into sending money or buying gift cards.

How to tell it is fake

If you already let them in

  1. Disconnect the device from the internet and power it off.
  2. From a different trusted device, change your email password first, then bank and other key accounts; turn on two-factor authentication.
  3. Call your bank if you paid anything or shared card details, and dispute charges.
  4. Clean the machine with trusted security software or a reputable local technician.
  5. Report at ic3.gov and reportfraud.ftc.gov.

If the intruder reached real accounts or money, account compromise recovery covers locking an attacker out, and elder fraud investigation helps when an older relative was the target.

See also: Scam & Fraud Recovery Help — the hub that maps every scam type and the free reporting steps.

Sources

  1. FBI Internet Crime Complaint Center (IC3), 2024 Internet Crime Report — tech-support / customer-support fraud, 2024. https://www.ic3.gov/AnnualReport/Reports/2024_IC3Report.pdf
  2. U.S. Federal Trade Commission — Consumer Advice, How to spot, avoid, and report tech support scams. https://consumer.ftc.gov/
  3. FBI Internet Crime Complaint Center (IC3), File a Complaint. https://www.ic3.gov/

Related services

Self-serve forensic tool

Want professional help with responding to a tech-support scam?

$995 once — lifetime license

Run the AI forensic agent yourself — every tool unlocked, no subscription.

Meet Your Practitioner

Quinnlan Varcoe

Founder & CEO

GIAC-certified · 9 industry certifications

With operational experience across Fortune 50 security programs and the defense industrial base, Quinnlan founded SleuthX in 2022 to provide clients with the caliber of expertise typically reserved for the largest enterprises. Her work in threat intelligence and digital forensics has earned the trust of 26,000+ cybersecurity professionals who follow her analysis.

“26,000 professionals follow my work because I say what others won't — and I can back it up technically.”

Fortune 50 BackgroundDefense IndustryThreat IntelligenceDigital PrivacyIncident Response
Quinnlan Varcoe, Founder & CEO

Tech-support scams: quick answers

Is the pop-up saying my computer is infected real?
No. A real operating system or antivirus never freezes your screen with a full-page warning and a phone number to call. Those pop-ups — often with alarms and a fake 'Microsoft' or 'Apple' logo — are designed to scare you into calling a scammer. Do not call the number. Close the browser (force-quit it if needed) and run a normal scan with software you already trust.
I called the number and let them onto my computer. What now?
Disconnect the device from the internet, then power it off. From a different, trusted device, change the passwords for your email and bank, starting with email. Call your bank if you shared financial details or made any payment. Run a full security scan or take the machine to a reputable local technician. Report it to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov.
They told me to buy gift cards to fix it. Is that a scam?
Always. No legitimate tech company is paid in gift cards, wire transfers, or cryptocurrency, and none will ask for remote access to 'process a refund.' Gift-card and refund-reversal demands are the signature of the tech-support scam. Stop immediately and report it.

Certified Expertise

GIAC

Transparent pricing

Trusted by partners across the practice

DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management
DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management