FAKE WARNING · BLOCKED BROWSER · REMOTE ACCESS
How to recognise a fake tech support scam: first-response guide
A warning page may impersonate Microsoft, Apple or your provider. It displays a number to call urgently and may appear to lock the browser. The aim is to obtain a call, payment or remote access to the device.
Stay calm and separate what a browser page displays from the actual state of your device. A page alone does not establish an infection, but it cannot prove the device is clean either, especially if you downloaded something or granted access.
1. Recognise a browser-based scare screen
The warning may fill the screen, play audio and repeatedly show dialogs. Some sites attempt to trap the cursor or return to full screen. A brand logo, countdown or synthetic voice is staged content, not an operating-system diagnosis.
A phone number in a web warning, pressure to act immediately and a request to install AnyDesk, TeamViewer or similar software are major signs. Note the web address without revisiting it and contact the provider through its independently opened official site if needed.
2. Understand the risk after a call
A fake technician may present ordinary commands or logs as proof of infection. Remote-support software is legitimate in itself, but access granted to a stranger may let them view files, install software, steal credentials or change settings depending on the session’s permissions.
Risk increases if you paid, disclosed passwords or codes, or the attacker retained access. Simply uninstalling the remote tool does not rule out another foothold: IT should examine the device and affected accounts.
Protect your teams against fake technical support scams
An alarming full-screen warning can push an employee to call someone impersonating Microsoft or Apple support. The scammer may request remote-control software, demand payment or try to access company data.
SecurCheck Business helps employees recognise fake technical support. They can submit the warning text and URL for available checks, then follow first-response steps for their situation. Promptly reporting any remote access granted lets your IT team respond.
The tool does not remotely unlock a computer, detect every malware infection or replace an investigation after remote access. A blocked web page does not establish that the device is clean.
Explore the Business offer3. What to do in your situation
No call or download
Do not call the number. Close the tab or exit full screen. If the browser does not respond, force quit it: Ctrl + Shift + Esc on Windows or Option + Command + Esc on macOS. Do not restore the suspicious tab. Clearing its browsing data may help but does not remove any potential malware.
Remote access granted
Disconnect the device and alert IT/security or a trusted professional immediately. Preserve the time, URL, number and received files; have the device examined before reconnecting it. From a clean device, change exposed passwords, revoke sessions and review access under your team’s guidance.
Payment or banking details shared
Contact your bank promptly using its usual number to secure the card or account and ask about disputing the transaction. Preserve evidence and report the scam to the relevant authorities.
Sources: Cybermalveillance.gouv.fr · Microsoft Support · Apple Support
Conclusion: break the pressure and report
A page that appears to lock your browser is designed to provoke a rushed reaction. Never treat the number shown as proof of identity. Checking its text or URL can reveal clues; if you granted access or shared data, start your incident response promptly.
Questions people ask in an emergency
My screen is red and tells me to call Microsoft: what should I do?
Do not call the displayed number. Exit full screen, close the tab or force quit the browser. If you installed a tool at the caller’s request, disconnect the device and seek independent help.
A Windows Defender Security Center page blocks my browser: am I infected?
A name displayed by a web page does not establish an infection. Close the browser without restoring the tab; have the device checked if you downloaded a file or granted remote access.
How do I close a tab playing a looping virus warning?
On Windows, use Ctrl + Shift + Esc to close the browser in Task Manager. On macOS, use Option + Command + Esc. Do not restore the suspicious session when restarting.