Before You Click 'Allow': Five Tech Support Scams Emptying American Bank Accounts

The Federal Trade Commission receives more complaints about tech support scams than almost any other fraud category, and the losses keep climbing. These cons succeed for a simple reason: they exploit trust in technology most people don't fully understand, and they manufacture urgency that short-circuits careful thinking. Below are the five schemes currently doing the most damage to American households — and, more importantly, how to recognize each one before any damage is done.

1. The Fake Pop-Up Warning

How it works: You're browsing a legitimate website when your screen suddenly fills with an alarming message: "SECURITY ALERT — Your computer has been compromised. Call Microsoft Support immediately at 1-800-XXX-XXXX." Often accompanied by a blaring siren and a frozen browser, the page mimics an official operating system error. It is, in reality, just a web page. Nothing has scanned your computer. Nothing is wrong.

Red flags: Real security alerts never include phone numbers. Legitimate operating system warnings appear as system dialogs, not browser pages, and never instruct you to call anyone. The siren sound and countdown timer exist purely to induce panic.

What to do: Close the browser tab without clicking anything. If the browser won't close, use your task manager or force-quit the application. Never call the number. If you're worried, run your own antivirus scan on your own terms.

2. The Cold Call From "Microsoft"

How it works: The phone rings. The caller, often with a script and a convincing call-center background, claims your computer has been sending error reports and is infected. They'll guide you to open Event Viewer — a Windows tool that always shows routine, harmless entries — and declare those entries proof of an attack. From there, they sell you a useless "repair contract" for several hundred dollars, or worse.

Red flags: Microsoft, Apple, and internet providers do not cold-call consumers about infections. No legitimate company can detect a virus on your machine remotely without your involvement.

What to do: Hang up. It requires no politeness. If you want confirmation, contact the company directly through the phone number printed on your device or official website — never the number the caller provides.

3. The Remote-Access Takeover

How it works: This is the costliest variant. The scammer convinces you to install legitimate remote-access software — tools like AnyDesk or TeamViewer that IT departments use daily. Once connected, they "diagnose" a fake problem, then open your online banking in front of you while claiming to "secure" it. Using screen-sharing and brief moments when they take control, they initiate transfers, change account credentials, and in some cases walk victims through wire transfers to "safety."

Red flags: Any request to install remote software from an unsolicited caller is disqualifying, full stop. So is anyone who needs access to your bank accounts to "help." Legitimate support never asks for banking passwords, PINs, or one-time verification codes.

What to do: Never grant remote access to an unsolicited caller. If you already have, disconnect from the internet immediately, uninstall the software, and call your bank's fraud line directly.

4. The Fake Refund Reversal

How it works: A caller claims the company accidentally refunded you too much — sometimes $500 instead of $50 — and asks you to correct it. They may even send a fake email showing an inflated deposit (often fabricated or from a manipulated screenshot). Then they request the "excess" back via gift cards, wire transfer, or cryptocurrency. In sophisticated versions, they use the remote-access trick to move money between your own accounts, making it look like a refund arrived when it didn't.

Red flags: Gift cards and cryptocurrency are never legitimate refund mechanisms — no real business uses them, ever. Requests to "return" money you haven't verified in your own bank statement are automatic disqualifiers.

What to do: Check your actual bank account before agreeing to anything. If the money isn't there, the conversation is over.

5. The Phishing Email and Text Trap

How it works: A message arrives — email, text, even a voicemail — claiming your antivirus subscription will auto-renew at $399 unless you cancel within 24 hours. The cancellation link leads to a convincing fake site that harvests your card number, or worse, connects you to "support," funneling you back into the phone scams above. This scheme is now the top entry point for the entire scam pipeline.

Red flags: Urgent deadlines, sender addresses that almost match the real company, and links to pages asking for full card details to "cancel" a charge. Hover over any link before clicking; mismatched domains give the game away.

What to do: Don't click. Log into the service directly through its official website or app to check subscriptions. Report the message as phishing and delete it.

The Universal Rules

Every one of these scams shares the same DNA: unsolicited contact, manufactured urgency, and a request for access or money through unusual channels. Three habits defeat nearly all of them. First, treat any inbound contact about your computer's security as hostile until verified independently. Second, never let anyone you didn't seek out connect to your device. Third, remember that gift cards, wires, and crypto are the payment rails of fraud — no legitimate transaction needs them.

Share these rules with older relatives and teenagers alike; both are heavily targeted. And if a scam does get through, speed matters — calling your bank within hours dramatically improves the odds of recovering funds. In the fight against these cons, skepticism isn't paranoia. It's the most effective security software ever shipped.