AI voice-cloning scams: how to protect your family with a safe word
A plain-English guide to AI voice-cloning scams, how family emergency calls get faked, and the one shared safe-word rule that stops many panic-driven losses.
Read articlePersonal Security
Tech-support scams: why that 'Microsoft' pop-up is fake
A plain-English guide to fake Microsoft pop-ups and tech-support scams, including what the warning signs look like, what to do right away, and how to help an older relative recover if they already called.
Individuals
If a pop-up claims Microsoft found a virus and tells you to call a phone number, assume it is fake. Microsoft says real error and warning messages never include a phone number to call, and the company says it will never proactively contact you to provide unsolicited technical support.
Sources: Microsoft support scam guidance, Microsoft tech support protection page
That direct answer matters because these scams still hit hard, especially with older adults. The FTC's 2024-2025 older-adults report says consumers 60 and older were five times more likely than younger people to report losing money on a tech-support scam in 2024, with $159 million in reported losses. The FBI also continues to warn about tech-support fraud and the newer "Phantom Hacker" variations built around remote access, fake bank protection, and rushed transfers.
Sources: FTC Protecting Older Consumers 2024-2025, FBI tech support scams
What the scam usually looks like
The pop-up may say:
- your computer is infected
- your files are at risk
- your banking information is exposed
- your Microsoft license expired
- you must call support immediately
Sometimes the screen appears frozen. Sometimes the sound is alarming. Sometimes the browser keeps throwing fake warnings so it feels unsafe to click anything. That is the point. The attacker wants panic before judgment.
The FBI says scammers may use unsolicited calls, text messages, pop-up windows, ads, or websites to get the victim to call for help. Once contact starts, they push urgency, remote access, and payment.
Source: FBI tech support scams
The signs it is fake
1. There is a phone number in the warning
This is the cleanest tell.
Microsoft says genuine Microsoft error and warning messages never include a phone number to call. If the message tells you to call support directly from the popup, that is a scam signal.
Sources: Microsoft support scam guidance, Microsoft tech support protection page
2. Someone wants remote access right away
Real support does not begin with panic-driven remote control from an unsolicited popup.
The FBI warns that once scammers get remote access, they can steal personal information and money. That is why "let me connect to your computer" is not a neutral troubleshooting step in this context. It is the scam.
Source: FBI tech support scams
3. They want payment in gift cards, wire transfers, crypto, or similar methods
Microsoft says it will never ask you to pay for support using cryptocurrency or gift cards. The FTC also repeatedly warns that scammers prefer payment methods that are hard to reverse.
Sources: Microsoft tech support protection page, FTC older-adult report
4. They say you must act immediately or lose everything
Urgency is the delivery mechanism.
The FBI's advice is simple: slow down and think. Panic is how the scam moves from a fake browser message to real account loss.
Source: FBI tech support scams
What to do right away
If the pop-up appears:
- Do not call the number.
- Do not click links in the warning.
- Do not allow remote access.
- Close the browser if you can, or disconnect from the network and restart if needed.
- Run security scans from tools you already trust.
Microsoft specifically recommends not calling the number in the popup and reporting the scam if you can.
Source: Microsoft support scam guidance
What to do if you already called
This is where families need a checklist, not blame.
If remote access was granted
- disconnect the device from the internet
- uninstall the remote-access tool if one was added
- run trusted security scans
- change important passwords from a clean device, starting with email
If payment or bank details were shared
- contact the bank or card issuer immediately
- ask about reversing or flagging suspicious charges
- monitor accounts closely
If identity details were shared
- secure email first
- rotate reused passwords
- watch for follow-on impersonation or account-reset attempts
The FBI's victim guidance includes contacting financial institutions immediately, changing passwords, and expecting follow-up contact because scammers often share victim information with other scammers.
Source: FBI tech support scams
If the bigger issue is an older parent who keeps getting pressured by phone-based scams, the live article on protecting aging parents from online scams is the better companion piece. This article is about the tech-support pattern specifically. The family operating rule is broader.
Why this scam works so well on older adults
It combines three things at once:
- authority
- fear
- a simple next step
That is why it stays effective. The victim is not being asked to understand malware. They are being told a familiar company found a problem and that calling one number will fix it.
The FTC's reporting shows older adults are disproportionately likely to report losses to this category. That is one reason tech-support scams show up repeatedly in any serious senior-scam discussion.
What families should set up before it happens
The best prevention is a small process:
- tell older relatives that Microsoft will not cold-call to fix their device
- tell them popups with phone numbers are fake until proven otherwise
- agree that they call a trusted family member before giving remote access
- keep one or two known support paths written down clearly
That last point matters. Many people call the scam number because they do not know what the real support path is supposed to be.
Final answer
That "Microsoft" popup is fake if it tells you to call a number, give remote access, or pay urgently. Microsoft says real warnings do not include a phone number, and the company does not proactively contact you with unsolicited tech support.
The right move is simple: do not call, do not click, do not grant access. If someone already did, shift immediately into cleanup mode by disconnecting the device, changing passwords from a clean system, contacting financial institutions, and reporting the fraud.
If a household needs more than a one-page cleanup process and wants a monitored response layer for sensitive devices, Ridge Watch is the relevant commercial page. But for most families, the first win is getting one rule to stick: no support number from a popup is trusted.
FAQ
How do I know a Microsoft popup is fake?
If it includes a phone number, pushes urgency, or wants remote access, treat it as fake. Microsoft says genuine error and warning messages never include a phone number to call.
Will Microsoft ever call me out of nowhere to fix my computer?
No. Microsoft says it will never proactively contact you to provide unsolicited technical support.
What should I do if I already called the number?
Disconnect the session, remove any remote-access software, run security scans, change important passwords from a clean device, and contact your bank if money or account data was shared.
Why are seniors targeted so heavily by tech-support scams?
Because the scam creates panic and pretends to offer help from a familiar authority. FTC reporting shows older adults are much more likely than younger people to report losing money in this category.
Is antivirus enough to stop this?
No. Antivirus can help, but these scams often succeed because the victim is talked into calling, paying, or granting remote access.
Sources and references
Last updated
June 15, 2026. We refresh this content as the threat landscape and tools evolve.
FAQ
Questions readers usually ask next
How do I know a Microsoft pop-up is fake?
If the message tells you to call a phone number, pay immediately, or give remote access, treat it as a scam. Microsoft says genuine error and warning messages never include a phone number to call.
Will Microsoft ever call me out of the blue to fix my computer?
No. Microsoft says it will never proactively reach out to provide unsolicited technical support.
What should I do if I already called the number?
Disconnect the session, remove any remote-access software, change important passwords from a clean device, contact your bank if payment or account details were shared, and report the scam.
Why do older adults lose money to tech-support scams so often?
These scams create panic and authority at the same time. FTC reporting has shown older adults are far more likely than younger people to report losing money to tech-support scams.
Can antivirus alone stop this kind of scam?
No. Software can help, but many losses happen because the victim is pressured into calling, paying, or handing over remote access.
Related reading
Keep going
Do you really need a VPN? An honest 2026 answer
A plain-English guide to whether most people actually need a VPN in 2026, what a VPN really does, when it helps, and what it does not protect you from.
Read articleGovernment impersonation scams: when the IRS, SSA, or Medicare calls
A plain-English guide to government impersonation scams, including IRS, Social Security, Medicare, and FTC fake-contact schemes, with the red flags families should treat as immediate warnings.
Read article