This post first ran in 2014. Twelve years later, “Microsoft just called about a problem with your computer” is bigger than ever — just dressed up better. Below is what is current as of 2026, written for the family member or co-worker most likely to get one of these calls.
The basic scam, in 2026 dress
The classic version was a phone call from someone claiming to be from Microsoft, Apple, your bank, or the IRS, telling you something was wrong with your computer or your account and that you needed to give them remote access (or a gift card, or a wire transfer) to fix it. That call still happens. What has changed is the polish:
- Browser lock-up pop-ups. A web page suddenly fills the screen with a Microsoft- or Apple-branded warning, an alarm sound, and a phone number to call. The page often shows your real IP address and the actual icon of the browser you are using to look more authentic. Microsoft and Apple never put a phone number on an error page.
- Caller-ID spoofing. Inbound calls now routinely show a real Microsoft, Apple, or bank phone number on your phone’s caller ID. The spoofed display does not mean the call is real — it means the scammer paid a few cents to make their VoIP gateway lie about where the call is coming from.
- Search-result poisoning. If you Google “Microsoft support phone number” you may get sponsored search results or AI-summary boxes that list a scammer’s number rather than Microsoft’s. Always go to the vendor’s own website and find the support number there.
- Multi-actor “Phantom Hacker” operations. The most damaging modern version uses a relay: a fake “tech support” person tells you your bank account is compromised, hands you off to a fake “bank fraud officer,” who hands you off to a fake “government investigator,” who instructs you to wire your savings to a “protected” account. The FBI says these scams have stolen billions of dollars from senior citizens in the last two years — and the average loss is in the tens of thousands.
How big is the problem?
The FBI’s Internet Crime Complaint Center (IC3) reported that seniors lost roughly $4.9 billion to fraud in 2024, with an average loss of about $83,000 per victim. Tech-support and government-impersonation scams are responsible for a large share of that. Of total dollar losses across all age groups, victims over 60 account for roughly two-thirds. This is the most expensive category of cybercrime in the country, and it almost always begins with a phone call or a pop-up — not a sophisticated technical attack.
Quick rules of thumb
- Microsoft, Apple, Google, your bank, and the IRS will never call you out of the blue and ask for remote access to your computer. Full stop. If someone on the phone is asking you to install AnyDesk, TeamViewer, “Quick Assist,” or a similar tool so they can “help,” hang up.
- A pop-up that says “your computer is infected, call this number now” is the scam. Real security alerts from Windows, macOS, your antivirus, or your browser do not include a phone number to call.
- If a pop-up will not close, shut the browser. On Windows:
Ctrl + Shift + Esc› pick the browser › End task. On macOS:⌘ + Option + Esc› pick the browser › Force Quit. Then re-open the browser without restoring the previous session. - Caller ID is not proof of anything. If a call claims to be from Microsoft, Apple, your bank, or the government, hang up and call the number on the back of your card or on the company’s real website.
- Nobody legitimate will ask you to pay in gift cards, prepaid debit cards, wire transfers, or cryptocurrency. No utility, no government agency, no bank fraud department. If that comes up, it is a scam.
- If you already gave them remote access: disconnect the computer from the internet (unplug the network cable or turn off Wi-Fi), shut it down, and call us or another trusted IT professional before turning it back on.
- If you already sent money: call your bank or card issuer immediately to attempt a recall, then file a report at ic3.gov. Speed matters — recoveries are far more likely in the first 24–48 hours.
If you want to help an older family member
The most effective protection we have seen is a pre-arranged code phrase: agree with your parent or grandparent that any phone call claiming to be from a tech company, bank, or government agency is treated as fake until they have hung up and called you first. Take the decision out of the moment of pressure. Pair that with a simple rule — “no remote-access software ever, for any reason, unless InfiNet (or a named family member) is on speakerphone” — and you will defeat 95% of these calls without anyone needing to be a security expert.
If you suspect a family member, employee, or you yourself was just on one of these calls, drop us a line or call 970-282-8838 right away. The faster we look at the machine and any payments in flight, the better the outcome.