{"id":33329,"date":"2024-06-03T18:31:37","date_gmt":"2024-06-03T16:31:37","guid":{"rendered":"https:\/\/www.kaspersky.co.za\/blog\/fake-tech-support-scam\/33329\/"},"modified":"2024-06-03T18:31:37","modified_gmt":"2024-06-03T16:31:37","slug":"fake-tech-support-scam","status":"publish","type":"post","link":"https:\/\/www.kaspersky.co.za\/blog\/fake-tech-support-scam\/33329\/","title":{"rendered":"“Hi, this is tech support”"},"content":{"rendered":"

According to the FBI\u2019s 2023 Internet Crime Report<\/a>, more than 37,500 complaints about fake tech-support scams were reported in the U.S. last year alone \u2014 resulting in over $924 million in losses. In this post, we discuss how these scams work, the dangers they pose, and how to protect yourself<\/a> from this type of fraud.<\/p>\n

How fake tech-support scams work<\/h2>\n

In this scheme, scammers typically impersonate technical or customer-support staff of major companies \u2014 most often in the tech industry. This allows the cybercriminals to use impressive-sounding terms and technical details that are incomprehensible to the average user.<\/p>\n

The most common pretext under which fake tech-support scammers initiate contact with potential victims is by claiming to have detected some problem on the latter\u2019s computer. For example, fake employees of a software developer or well-known antivirus company call you with a made-up story about their having detected malware on your computer.<\/p>\n

Scammers thus overwhelm their victims, instilling panic and a sense of helplessness. The scammers then manipulate these emotions to build trust \u2014 these schemes are usually designed to ensure the victim has no choice but to trust the scammer. It\u2019s this trust that the scammers ultimately exploit to achieve their goals.<\/p>\n

How fake tech-support scammers find you<\/h2>\n

To make initial contact with the potential victim, tech-support scammers use a variety of tricks. But in general there are three basic scenarios.<\/p>\n

Fake websites and social media accounts<\/h3>\n

Some scammers create web pages or social media accounts that mimic those of legitimate companies. They may also use search engine or social media ads to promote these fake resources, hoping that potential victims will come to them looking for help with technical issues.<\/p>\n

To carry out the attack, the scammers need to be in continuous contact with the victim. For this reason, they usually come up with some pretext to switch communication to phone calls or messaging apps.<\/p>\n

Pop-up windows and \u201cproblem detected\u201d notifications<\/h3>\n

Another popular scenario for this scam involves using pop-up windows and notifications that mimic operating system or antivirus warnings. These notifications, usually alarmingly red or orange in color, warn that something is wrong with the victim\u2019s computer \u2014 most often that there\u2019s a virus.<\/p>\n

Again, since the scammers need to actively communicate with the victim, they usually provide a phone number to call in order to resolve the detected problem.<\/p>\n

Phone calls<\/h3>\n

Finally, the most popular method of contacting victims is direct phone calls. These can be roughly divided into \u201ccold\u201d and \u201cwarm\u201d calls. In the former case, fake tech-support scammers simply dial random numbers, often posing as representatives of major companies whose products are widely used. For example, you don\u2019t have to try very hard to find a Windows user.<\/p>\n

Warm calls involve using information obtained through breaches or leaks of customer data from certain companies. Naturally, knowing the victim\u2019s name and the products they use gives the scammers more credibility, increasing their chances of success.<\/p>\n

What is the main danger of fake tech-support scams?<\/h2>\n

Looking closer at the figures we started this post with, you\u2019ll notice that tech-support scams aren\u2019t about small charges for non-existent services. The average reported loss is almost $25,000.<\/p>\n

This highlights the main danger of fake tech-support: scammers don\u2019t settle for small profits, but instead try to extract as much from their victims as possible. To do this they devise intricate schemes and utilize social engineering<\/a> techniques.<\/p>\n

In particular, tech-support scammers often pressure victims into installing remote-access or screen-sharing software, disclosing or exposing passwords for financial accounts, and sharing one-time transaction confirmation codes. They might even stage elaborate performances involving multiple phone calls from various \u201ccompany employees\u201d, \u201cfinancial institutions\u201d, or \u201cgovernment agencies\u201d.<\/p>\n

How to protect yourself from fake tech-support scammers<\/h2>\n

If someone contacts you claiming to be from tech support, warns you of some danger, and asserts that action must be taken immediately<\/em> \u2014 most likely it\u2019s a fake tech-support scammer.<\/p>\n

Try not to panic, and avoid doing anything you might regret later. It\u2019s better to discuss what\u2019s happening with someone else, as this can help you identify inconsistencies and holes in the scammer\u2019s story. To buy time, ask them to call you back \u2014 say that you\u2019re busy, you have another call, your phone has low battery, or simply pretend to get cut off.<\/p>\n

In addition, to protect against scammers, you can take the following measures:<\/p>\n