What are the warning signs of a tech support scam?

Watch for: Unsolicited call about your computer; Asked to install remote-access software; Payment via gift card, crypto or wire transfer; Pop-up with a phone number and a siren sound.

How can I tell if this is a scam?

Stop and verify independently. Contact the organisation using details you look up yourself, never the ones in the message, and don't act on urgency. You can also paste the message into the ScamShield AI scam checker for a risk assessment — it gives guidance, not a guarantee.

What should I do if I clicked the link or replied?

Stop all contact, change the password on any account you logged into and turn on two-factor authentication, and watch your accounts for changes you didn't make. Hang up — Microsoft, Apple and Telstra never call you about viruses. Close the browser. If it won't close, restart the computer. If you gave remote access, disconnect from the internet and run a virus scan.

What should I do if I already sent money?

Contact your bank immediately and ask about stopping or recalling the payment, keep all evidence, then report the scam. Be wary of anyone who later offers to recover your money for a fee.

Where should Australians report this scam?

Report scams to Scamwatch (National Anti-Scam Centre), report cybercrime to ReportCyber, forward scam texts to 7726, and contact IDCARE if identity details were exposed. Contact your bank first if money is involved.

All scams

🖥️

Tech support scam

Pop-ups or calls claiming your computer is infected, asking for remote access.

Senior

How it works

A pop-up or cold call claims to be from Microsoft, Apple or Telstra. They ask you to install AnyDesk or TeamViewer, then 'show' you fake viruses and charge hundreds for a 'fix' — or quietly empty your bank account.

Common scenarios to watch for

This scam shows up in several different shapes. Recognise the pattern, not just one message.

Reporting locationHotlines on the printed checklist will match this location.

Browser-lock pop-up

A full-screen pop-up plays an alarm and claims Microsoft has locked your PC. The number connects to a scam call centre.

"Microsoft Defender: 5 viruses detected. Do not restart. Call 1800-xxx-xxx within 5 minutes."

Red flags to spot

Is a pop-up blocking your screen and playing an alarm sound?
Does it claim to be from Microsoft, Apple, or Norton but you've never contacted them?
Are you being told not to restart or close the browser?
Does it display a phone number to call for help?

'Apple iCloud' breach call

A robocall says your iCloud has been compromised and someone is uploading photos from your account. You're transferred to 'security' who asks for your Apple ID code.

"This is Apple Support. Your iCloud was accessed from Russia. Press 1 to secure your account."

Red flags to spot

Did you receive an unsolicited call about your Apple account?
Are they asking for your Apple ID password or a verification code?
Did they transfer you to 'security' who then asks for remote access?
Is the caller using fear (unauthorised access, photos leaked)?

Refund overpayment scam

A 'support' email says your antivirus subscription auto-renewed at $499. The 'refund' agent uses remote access to 'transfer' too much money — then asks you to wire back the overpayment.

"Norton: auto-renewal of $499 processed. To cancel and refund, call 1800-xxx and quote ID #NRT-9920."

Red flags to spot

Did you receive an email about an auto-renewal you didn't authorise?
Is the refund process requiring remote access to your computer?
Did they 'accidentally' refund too much and ask you to send the difference back?
Are they asking for bank details or gift cards to process the refund?

Red flags

🚩Unsolicited call about your computer
🚩Asked to install remote-access software
🚩Payment via gift card, crypto or wire transfer
🚩Pop-up with a phone number and a siren sound

What to do

1Hang up — Microsoft, Apple and Telstra never call you about viruses.
2Close the browser. If it won't close, restart the computer.
3If you gave remote access, disconnect from the internet and run a virus scan.

Who's targeted

Seniors and less tech-confident users.
Anyone who lands on a scary browser pop-up while browsing.

Why it works

Loud alarms and 'Microsoft' branding induce panic.
Remote access lets scammers 'prove' the threat by showing harmless system files.

Common variations

Different shapes of the same scam — recognise the pattern.

1Cold call claiming to be from Telstra/Microsoft.
2Pop-up with siren and a 1800 phone number.
3Fake antivirus download from a sponsored search result.

If you've already been scammed

1Disconnect from the internet and uninstall any remote-access software (AnyDesk, TeamViewer).
2Change passwords from a different, clean device — banking first.
3Run a full antivirus scan or take the device to a trusted repairer.

Frequently asked

Will Microsoft or Apple ever call me?▾

No. Neither company makes unsolicited support calls.

I let them on my computer — what now?▾

Disconnect, change all passwords from a different device, and call IDCARE.

Are the pop-ups viruses?▾

Usually not — they're ads designed to scare. Close the tab or restart the browser.

Questions people ask about this scam

How does the tech support scam work?: A pop-up or cold call claims to be from Microsoft, Apple or Telstra. They ask you to install AnyDesk or TeamViewer, then 'show' you fake viruses and charge hundreds for a 'fix' — or quietly empty your bank account.
What are the warning signs of a tech support scam?: Watch for: Unsolicited call about your computer; Asked to install remote-access software; Payment via gift card, crypto or wire transfer; Pop-up with a phone number and a siren sound.
How can I tell if this is a scam?: Stop and verify independently. Contact the organisation using details you look up yourself, never the ones in the message, and don't act on urgency. You can also paste the message into the ScamShield AI scam checker for a risk assessment — it gives guidance, not a guarantee.
What should I do if I clicked the link or replied?: Stop all contact, change the password on any account you logged into and turn on two-factor authentication, and watch your accounts for changes you didn't make. Hang up — Microsoft, Apple and Telstra never call you about viruses. Close the browser. If it won't close, restart the computer. If you gave remote access, disconnect from the internet and run a virus scan.
What should I do if I already sent money?: Contact your bank immediately and ask about stopping or recalling the payment, keep all evidence, then report the scam. Be wary of anyone who later offers to recover your money for a fee.
Where should Australians report this scam?: Report scams to Scamwatch (National Anti-Scam Centre), report cybercrime to ReportCyber, forward scam texts to 7726, and contact IDCARE if identity details were exposed. Contact your bank first if money is involved.

General scam awareness information. ScamShield AI cannot guarantee that every scam will be detected or that a message is legitimate.

Check a message like this Report & next steps