Tech Support Follow-Up Scams: They Come Back
Tech Support Follow-Up Scams: When Scammers Come Back Pretending to Fix What They Broke
You fell for a tech support scam—someone convinced you your computer was infected and you gave them remote access or paid for fake repairs. It was a terrible experience, and you thought it was over.
Then another "technician" contacts you, saying the previous agent made errors and they need to fix the damage. Or a "supervisor" calls to process a refund for the overcharge. Or a pop-up appears warning that your system is still compromised.
It's not a rescue. It's the same scam running again—sometimes by the same people, sometimes by criminals who bought your information from the original scammers.
How Tech Support Follow-Up Scams Work
The Contact
Weeks or months after the original tech support scam, you hear from another "agent" who claims:
- The previous technician made errors on your computer that need to be corrected
- Your system still has malware from the original incident that wasn't fully removed
- A refund is owed to you for the overcharge, but they need access to process it
- Your antivirus subscription is expiring and your system is at critical risk
- The "company" fired the previous agent and wants to make things right
The Goal
Every version of this scam has the same objective—get back into your computer or get more money:
- Remote access to your computer—using tools like AnyDesk, TeamViewer, or UltraViewer, so they can steal passwords, banking credentials, and personal files
- You opening your banking app while they watch—so they can see your login credentials, account numbers, and balances in real time
- Payment for fake security software or extended "protection plans"
- Gift card purchases—they claim it's part of the refund process or payment for new security software
The "Refund" Variant
One especially effective version involves a supposed refund:
- The "agent" says you're owed a refund and needs remote access to process it
- While connected, they ask you to log into your bank to "receive the deposit"
- They manipulate the screen to make it look like they transferred too much money
- They claim it was an error and beg you to send back the "overpayment" via gift cards or wire
- No real money was ever deposited—they edited what you see on screen
Red Flags
- Unsolicited contact about your computer—Microsoft, Apple, Google, Norton, and McAfee will never call you about computer problems
- Pop-ups with phone numbers—these are fake alerts embedded in websites, not real system warnings; close the browser to dismiss them
- Anyone asking you to install remote access software—AnyDesk, TeamViewer, or UltraViewer downloads requested by a stranger are always a scam
- Requests to log into banking while they have remote access—there is never a legitimate reason for this, under any circumstances
- Requests to buy gift cards "for a refund"—refunds come back through the same payment method, not through gift cards
- Urgency—"your computer will crash," "hackers are in your system right now"
What Microsoft, Apple, and Google Will Never Do
- They will never call you about a virus, error, or security issue on your personal computer
- They will never ask for remote access to your device through an unsolicited call
- They will never ask you to pay with gift cards for any service
- They will never show you pop-ups with phone numbers to call for support
- They will never ask you to open your banking while they're connected to your computer
What to Do If You're Contacted
- Hang up or close the pop-up—do not call any number shown in a browser pop-up
- Do not install remote access software for anyone who contacts you unsolicited
- Do not open banking or financial apps while anyone has remote access to your device
- If you previously gave remote access, have a trusted local technician check your computer for malware, keyloggers, and unauthorized software
- Change all passwords from a different, clean device—assume any password you typed while the scammer had access is compromised
How to Report Tech Support Scams
| Where to Report | What It Covers | |----------------|---------------| | ReportFraud.ftc.gov | All consumer fraud including tech support scams | | IC3.gov | Internet and cyber-based scams | | microsoft.com/reportascam | If they impersonated Microsoft specifically | | Your bank's fraud department | If they accessed your banking or you sent payment | | Your local police | For a report number |
The Bottom Line
No legitimate technology company will ever call you, pop up a warning with a phone number, or ask for remote access to your computer out of the blue. If someone contacts you claiming to fix a previous tech support issue, it's the same scam wearing a new mask. Hang up, close the pop-up, and don't let anyone back into your computer.
Use ScamSecurityCheck's analyzer to check suspicious tech support messages or emails—it can identify common patterns used in tech support follow-up scams.
Courtney Delaney
Founder, ScamSecurityCheck
Courtney Delaney is the founder of ScamSecurityCheck, dedicated to helping people identify and avoid online scams through AI-powered tools and education.
Learn moreSupport Our Mission
ScamSecurityCheck is built to protect people from online fraud. Your contribution helps us keep building free security tools and resources.
