Scam alerts
New tech support and remote access scams as we see them: the exact pop-ups, emails, phone numbers and files, and what to do if one reached you.
Is someone on your computer right now? Disconnect it from the internet, then follow this two-minute checklist.
Phone scamStill activeFake internet provider call says it needs to test your internet speed, then has you install UltraViewerA fake internet company caller says they're upgrading your area, has you install UltraViewer, then asks you to open online banking.Reported Fake warning pop-upStill activeFake "Windows Firewall" pop-ups from ads on MSN and other big sites, hosted on Microsoft's own cloudAds on sites like MSN and Legacy.com open fake Windows "System Error" pages hosted on Microsoft Azure, with a toll-free number to call.Reported Phone scamStill activeFake "IT Support" or "Help Desk" messages in Microsoft Teams ask you to share your screen with Quick AssistStrangers pose as your company's help desk in Teams, often after a flood of junk email, and ask you to open Quick Assist.Reported · updated Phone scamStill activeCalls from Butterfield Bank's real number about "suspicious international payments" ask you to install AnyDeskFake Butterfield fraud investigators spoof 441-295-1111, then pass you to "tech support" who has you install AnyDesk.Reported · updated Fake warning pop-upStill activeFake Apple security alert says your iPhone is blocked, then a fake "Apple" agent asks you to share your screenA pop-up says your iPhone is blocked. The caller claims to be Apple, sends a fake badge, asks you to share your screen and then wants your SSN.Reported Fake warning pop-upStill activeFake "Microsoft has disabled your computer" screen leads to a call asking you to install UltraViewerA fake Windows lock screen shows a "Microsoft Security" number. The person who answers asks you to download UltraViewer so they can get in.Reported Email scamStill activePower BI "Download Reference" link installs ScreenConnect remote access on your PCA link in an email opens a Microsoft Power BI page with a "Download Reference" button that quietly installs ScreenConnect.Reported Fake websiteStill activeFake bank "support chat" downloads AnyDesk so scammers can get into your computerA warning about your bank account sends you to a fake bank site whose "live chat" downloads AnyDesk and asks for your code.Reported Email scamStill active"Transaction Receipt" PDF email quietly installs Action1 remote access on your PCA blurred "Transaction Receipt" PDF fetches a fake Adobe update that installs Action1, giving the sender remote control of your PC.Reported Email scamStill active"EFT Wire Transfer" email about a $5,745.65 payment installs ScreenConnect remote accessA fake paid invoice email for $5,745.65 links to a remote-access program, not a PDF, and lists a number to call for a refund.Reported Fake warning pop-upStill activeFake "Microsoft Defender Security Center" pop-up from a Google ad locks your browserA Google ad opens a fake "ShopEase" store that turns into a full-screen fake Microsoft Defender alert with a number to call.Reported