Microsoft tech support scam pop-ups aren’t new, and despite continuous efforts to raise awareness, millions globally fall for these, with total losses amounting to over $150 billion, according to reports.
Remember, all tech support scams are based on a simple premise, create a sense of urgency, and it is achieved by using phrases that send users into frenzy. You will often find phrases like “Your computer is blocked” or “Your computer may have a virus” in these pop-ups, directing users to call the Microsoft tech support scam number.
So, if you or someone around ever came across a Microsoft pop-up scam, it’s vital to know all about it. Keep reading to find out!
Why am I getting Microsoft tech support pop-ups?
- You visited a malware-ridden website: Mostly, you get these pop-ups while visiting unreliable websites that were created for the sole purpose of tricking unsuspecting users. Also, websites with high traffic are often hacked to display such messages.
- Threat actors are running ads on a legitimate website: I have seen cases where these pop-ups are unscreened ads run by third-party agencies on reliable websites. If you ever see one, make sure to inform the administrator.
- Your PC is infected with malware: If you are getting Microsoft tech support scam script on the PC instead of a browser, it’s likely that the computer is infected with malware. Recently downloaded apps or files could be to blame for this!
Table of Contents
How do I identify Microsoft pop-up scams?
1. Look for grammatical mistakes in the pop-up
The easiest way to identify a Microsoft virus alert pop-up scam is to check for grammatical errors in the message that appears. I have seen countless such examples, and there are always grammatical mistakes or inconsistencies in phrasing of sentences. Here’s an example:
Microsoft or other established organizations never use this sort of sentence formation or language. It’s usually more formal, while that used in tech support scams leans towards the casual side.
Although, I expect this to change with the recent developments in AI. Threat actors can now simply provide the message to an AI-based chatbot and get a refined version that aligns with a genuine error. So, you can’t solely rely on this check or any other. A comprehensive approach is required from your end!
2. See if there’s a number to call
These Microsoft tech support scam pop-ups always have a number to call. When I started the research part, I discovered that the most searched queries on Google include “888 826 5481 Microsoft tech support scam” and “What is the Microsoft tech support scam 855-783-5888“. This and the picture below clearly validate my point!
This is where things get interesting. While scammers add these numbers to force you to place a call, you can use the same to identify whether it’s a scam. Just search for the number on Google or dedicated websites like ScamNumbers.info and find out whether the number is linked to such scams.
3. Pop-up appears only on a specific website
If you get the Microsoft tech support scam pop-up on a website, close the tab and visit another one, even if the message says that the computer is blocked. The pop-up, in all likelihood, shouldn’t appear anymore!
This happens when you enter an incorrect website address!
Threat actors usually create websites with domain names similar to popular ones to get more traffic from users who make such mistakes.
In case the browser stops working upon getting the tech support pop-up, press Ctrl + Shift + Esc to open the Task Manager > select the affected browser > click on End task > relaunch the browser > enter the correct address and continue with your work.
As long as you didn’t click anywhere, there’s nothing to be worried about!
4. Shows inaccurate data
Another easy trick to identify a Microsoft tech support scam is to look for inconsistencies in the data that appears in the pop-up, if any. For instance, if you get a pop-up that reads, “Windows Defender Security Warning,” on MacOS, you know it’s a scam!
Similarly, check for inaccuracies in the region, browser name, and other key aspects.
5. Asks you to install a remote access tool
If you somehow got to the next stage of the scam, i.e., you are on a call with the scammer, see if they ask you to install a remote access tool. Legitimate support executives usually don’t request this level of access.
Remember, never install a remote access tool unless you are absolutely sure about the credentials of the person at the other end. Doing so puts your computer at risk and allows the threat actor to download scripts that can fetch critical data, including passwords and banking details, from the PC!
6. Threat actor shows you trivial issues in Event Viewer
In the past few years, almost 90% of Microsoft tech support scams involved the scammer launching Event Manager on the PC after gaining remote control and highlighting error messages. This creates a sense of urgency, not allowing affected users to think the situation through. And that’s when they fall for the scam, losing their precious earnings.
But here’s something you didn’t know. Most error logs in the Event Viewer aren’t critical and can simply be ignored. If it’s something critical, there will be other signs, say an abrupt shutdown, BSOD (Blue Screen of Death), diminished performance, app crashes, or file corruption!
Here’s a screenshot of the Event Viewer on my PC:
As you can see, there are several warnings and errors, but none of them affected the PC’s performance. These issues are bound to happen on any device, and the system is more than capable of handling it all, be it identifying the problem or auto-troubleshooting!
7. Demands payment
If you haven’t yet identified the Microsoft tech support scam, this is the last step. As soon as you are asked for payment, know that there’s a scammer at the other end. Legitimate tech support agents never ask for money.
In my experience, scammers typically request Amazon or Apple Gift Cards since these can’t be traced as easily. Money, on the other hand, leaves a trail that can expose their identity.
Remember, never ever pay money in such situations, no matter what. Because once you do, there’s no getting it back!
How do I get rid of the Microsoft tech support pop-up scam?
Protection from Microsoft support pop-up scams is easy as long as you remain vigilant, but getting rid of these is the tricky part. So, let’s find out how to remove tech support scam popups from Microsoft Edge, other browsers, or the Windows PC.
- Terminate browser in Task Manager: Open the Task Manager > select the browser’s process > click on End task. Don’t terminate the browsing session by clicking on Close near the top right. Clicking anywhere with an active scam pop-up can trigger script or malware downloads.
- Reset the browser settings: Open the browser > go to Settings > navigate to Reset settings > click on Restore settings to their original defaults. Since browsers can save data and settings from previous sessions, resetting things to their default is vital.
- Scan the PC for malware: Run a malware scan on the PC using the built-in Windows Security or a third-party antivirus solution like Norton or Avast.
- Check the Task Scheduler for scam scripts: If you are auto-redirected to a website that displays the Microsoft tech support scam pop-up upon booting Windows, most likely, there’s a script that’s triggering it. So, check the Task Scheduler for any such entries and delete them.
- Install an adblocker: While I earlier recommended uBlock Origin, it’s not available on the Chrome Web Store anymore. So, users can now install the AdGuard AdBlocker extension. This will block ads, including the Microsoft tech support scam pop-ups.
- Reset the PC: If you inadvertently clicked on the pop-up and a file was downloaded, delete it immediately. But if your system begins to act up, reset it to factory defaults. This will delete files, uninstall apps, and reset settings. Post-reset, the PC will be as good as new!
What to do if you have already called on the provided number?
If you have already called the number listed in the Microsoft support scam pop-up, hang up right away. Again, as long as you haven’t shared any payment details, allowed remote access to the PC, or downloaded files, you are safe. To be sure, you can run a full-system malware scan!
But if any of these happen, immediately change the banking information and account passwords.
In both cases, you must report the Microsoft tech support scam to relevant authorities in your country as well as Microsoft through the dedicated form.
Where do Microsoft tech support scams originate from?
While Microsoft tech support scams originated from countries like the USA, recently, India, Nigeria, and the Philippines have emerged as a hub of such scams. They primarily target the elderly in developed countries.
Every few months, you come across news articles about authorities busting fake call centers that scam people using these pop-ups!
In the last few years, countless organizations have worked on raising awareness around the Microsoft tech support scam and other similar phishing attempts. Stop Scams Alliance is a prominent name in the space, with its founder, Ken Westbrook, often featuring in conferences on the subject.
In my opinion, there are two ways to put an end to such scams: raising awareness and enforcing strict laws. Until now, we haven’t been able to achieve either but we are at least moving in the right direction. This blog, too, aims to make the vulnerable aware about Microsoft tech support scams.
Remember, if you ever come across a Microsoft virus alert pop-up scam that directs you to call the provided number, don’t. Doing so won’t just put your PC at risk but will also drain your wallet in no time!
Before you leave, read our investigation into Soul AI, a project claiming to offer unrealistic payouts.
If you want to share more tips to identify and avoid such scams with our readers, drop a comment below.
