Skip to content

Independent guidance. No ads. No recovery services.

AI background

Tech support scams: Pop-ups, Remote Access, and Refunds

Identify tech support scams involving pop-up warnings, remote access, and fake refunds, with official steps to secure devices and report a loss.

On this page
  1. How tech support scams start with a pop-up
  2. Remote access and tech support scams
  3. Refund stories and demands to protect money
  4. Support domains named in older tech support checks
  5. Checking support and reporting the incident
  6. Recovering from a fake technician

Unexpected tech support scams use frightening computer warnings or unsolicited calls to persuade someone to provide remote access or payment. The FTC says a warning that urges the reader to call a telephone number can be fake. Close the interaction and obtain help through a manufacturer or support provider independently chosen by the device owner instead.

A message displaying a familiar technology company’s name does not prove that the company inspected the computer. The FTC describes impersonators who pretend to scan for viruses after obtaining access, then charge for unnecessary help. Check the route by which the contact began before considering its diagnosis. An unsolicited warning is insufficient reason to hand over control.

How tech support scams start with a pop-up

A pop-up may look urgent because it claims a virus or serious security problem needs immediate action. The FTC advises against calling the number in such a warning. Do not let an alarming screen determine who provides assistance. Use the manufacturer’s genuine support route, found independently, to ask about a problem that continues after the message is closed.

Tech support scams also use advertisements or search results to attract people already looking for computer help. The FTC warns that scammers try to make their sites appear in those results. Check the actual provider’s identity and website before calling. The phone lookup guide explains why the appearance of a phone number does not itself authenticate the business.

ApproachPractical response
Pop-up asks for a callFind the manufacturer’s support independently.
Technician demands a bank transferContact the bank directly.
Unexpected refund needs account detailsCheck the original provider independently.

Remote access and tech support scams

Remote access gives another person control beyond a conversation about a device. The FTC describes impersonators using this access to invent malware findings or claim that financial accounts were compromised. Stop following instructions that extend a computer diagnosis into banking actions. Someone viewing the screen should not direct transfers, cash withdrawals, or disclosure of a bank login.

Tech support scams can escalate when a supposed technician transfers the caller to a fake government official. The FTC says impersonators may supply badge numbers and case numbers before claiming money needs protection. These details are part of the story, rather than independent proof. Contact the bank directly instead of moving funds according to the supposed official’s instructions.

Refund stories and demands to protect money

A refund offer can introduce another payment trap. The FTC warns about callers who claim a customer overpaid for support or is owed money because a company is closing. The caller then seeks bank or card details. Check the original purchase independently and contact the real provider directly before treating the proposed refund as an authentic transaction.

The FTC recommends updating security software, running a scan, and removing identified problems after a scammer has accessed a device. Change exposed passwords and seek help from a trusted manufacturer or technician if needed. The bank fraud guidance covers related account impersonation. Contact the bank promptly if financial information or a transfer was involved during the remote session.

Support domains named in older tech support checks

Several support brands checked in earlier years no longer operate a working website. A registry lookup on November 7, 2026 found no active registration for microtechsupport247.com, ozemioinc.com, vtechgeeks.com, absolutesoftech.us, ezytechsupport.com, deltechsolutions.us or webtechsolutions247.com, and none of those addresses loaded. A caller using one of these names today cannot point to a live company site.

Two other names have changed character. Chawlatechnicalsupport.com is still registered, to May 2027, but on November 7, 2026 it served an unrelated gambling-style page rather than support content. Monktech.net, registered since 2012, now presents itself as an informational site publishing troubleshooting guides and says it does not offer direct support. Neither page offers a phone line to call.

Treat any call, pop-up or invoice that uses one of these names the same way as any unsolicited support contact. Close the session, do not install remote access software, and contact the maker of the device or software through an address found independently. A separate page covers the iYogi case brought by the Washington Attorney General.

Checking support and reporting the incident

Preserve the warning text, telephone number, support website, receipts, and descriptions of software installed during the interaction. Record which accounts were opened while remote access was active. This helps separate device recovery from payment recovery. The reporting guide explains how to organize facts so the support provider, bank, and public agency receive a clear account of what happened.

Report tech support scams at ReportFraud.ftc.gov and tell the payment provider about any money sent. The FTC advises contacting the card issuer or other payment company and asking for a reversal or refund. Continue securing affected accounts even after filing the report, because reporting the approach does not itself remove software, change passwords, or stop an existing transfer.

Recovering from a fake technician

For a payment made to a fake technician, contact the card issuer, bank, gift-card company, or payment app immediately and ask about reimbursement. FTC guidance recommends approaching the company that handled the money. Explain whether the charge was an agreed repair fee obtained by deception or a transaction made after the caller acquired unauthorized access to financial accounts.

If a fake technician obtained a password, change it through the genuine service, replace matching credentials elsewhere, and enable multifactor authentication under FTC guidance. Keep the remote-access instructions and affected account details as evidence. For identity misuse, use IdentityTheft.gov. Addressing exposed credentials is separate from asking the payment provider to reverse the supposed repair charge or support subscription.

An unsolicited promise to refund a fake support fee may be another attempt to collect money or financial details. FTC recovery warnings describe that follow-up pattern after earlier losses. Review the recovery warning signs and contact the original card issuer directly; a caller’s knowledge of the supposed repair does not justify another payment or renewed access to the computer.

Companies and numbers checked in this category

Questions and answers

Should a virus pop-up telephone number be called?

The FTC advises against calling numbers displayed in unexpected security pop-ups. These can lead to support impersonators. Seek assistance through a manufacturer or trusted provider found independently, rather than letting the warning choose the person who gains access to the device.

Can a supposed technician transfer money to protect it?

The FTC warns that support scammers may introduce fake officials who say funds must be protected through transfers or withdrawals. Do not follow those instructions. Contact the financial institution directly using a known number or its genuine app.

What should happen after remote access was granted?

The FTC recommends updating security software, scanning the device, and removing identified problems. Change exposed passwords and enable multifactor authentication. If help is needed, use a trusted manufacturer or technician, and contact the bank about financial information or payments involved.

How should an unexpected support refund be checked?

Contact the original provider through a known, genuine route. The FTC warns about refund impersonators who ask for bank or card information. Do not give financial details to an unexpected caller simply because a refund or previous overpayment is mentioned.

What if a fake technician was paid with gift cards?

Contact the card issuer immediately, explain that the codes were supplied during a technical-support scam, and request a refund. The FTC recommends keeping the cards and receipts. Retain the repair demand as evidence; ending remote access does not itself recover value already transferred through the codes.

What if a fake technician learned an email password?

Use the genuine email provider to replace the exposed password and any reused copies, following FTC recovery advice. Enable multifactor authentication and use account recovery if access has been lost. A technician’s request to discuss a supposed virus does not justify continued access to email or authentication codes.

How should personal information exposed during a support session be addressed?

Use IdentityTheft.gov for FTC steps tailored to the information the impersonator obtained. Also update security software and scan the computer after deceptive remote access. Account protection and identity recovery address risks beyond the repair charge, which must be raised separately with the relevant payment company.

Why is a second repair-refund caller a warning sign?

The FTC warns that recovery callers target people after earlier losses, often demanding fees or financial details before helping. Check a proposed refund through the original provider independently. Preserve both the technical-support invoice and the new reimbursement demand instead of giving another stranger access to the computer.

Sources

  1. Registration data for microtechsupport247.com · ICANN Registration Data Lookup
  2. Registration data for vtechgeeks.com · ICANN Registration Data Lookup
  3. Registration data for chawlatechnicalsupport.com · ICANN Registration Data Lookup
  4. Registration data for monktech.net · ICANN Registration Data Lookup
  5. MonkTech home page · monktech.net
  6. How To Spot, Avoid, and Report Tech Support Scams · Federal Trade Commission
  7. What To Do if You Were Scammed · Federal Trade Commission
  8. How To Recognize and Avoid Phishing Scams · Federal Trade Commission
  9. Refund and Recovery Scams · Federal Trade Commission