Windows Tech Support Scam UK: How to Spot and Stop Fake Microsoft Calls
Scammers are calling UK residents pretending to be Microsoft tech support — but Microsoft will never call you about a virus on your PC.
What is this scam?
A Windows tech support scam is a fraudulent scheme where criminals pretend to be from Microsoft or a legitimate tech support company. They contact UK residents via unsolicited phone calls, pop-up warnings on your screen, or emails claiming your Windows PC has detected a serious virus, security threat, or hardware problem. The scammers use high-pressure tactics and fake technical language to convince you that your computer is at immediate risk. They then ask you to call a number, grant them remote access to your device, or pay money for fake antivirus software or 'support packages'. In reality, there is no virus, and the goal is to steal your money, personal data, banking credentials, or install actual malware on your device. This scam has been running for over a decade and remains one of the most common tech scams targeting UK consumers.
Warning signs to look for
- You receive an unsolicited phone call claiming to be from Microsoft or Windows support — Microsoft will never call you about problems with your PC.
- A pop-up appears on your screen warning of a virus or security threat, often with urgent red graphics and a phone number to call immediately.
- The caller claims to have detected problems remotely without you contacting them first or installing any monitoring software.
- You are asked to grant remote access to your computer using software like AnyDesk or TeamViewer so the 'technician' can 'fix' the problem.
- The scammer requests payment via gift cards, bank transfer, cryptocurrency, or credit card for fake antivirus software or 'lifetime support'.
- The person uses technical jargon or fake file names (like 'C:\Windows\System32') to sound credible and create panic.
- They pressure you to act immediately, claiming your data or money is at risk if you don't comply right now.
- The phone number or email address does not match any official Microsoft contact method listed on Microsoft's genuine UK website.
How this scam works step by step
The scam typically begins when you receive a cold call from someone claiming to be from Microsoft, or when a pop-up appears on your screen while you are browsing the internet. The pop-up often displays alarming warnings like 'Your PC is infected with a virus' or 'Your Windows licence has expired', along with a phone number to call. If you call the number, you reach a scammer who asks security questions to build trust, then claims they have detected malware on your device and can see it remotely. They convince you to download remote access software such as AnyDesk or TeamViewer, granting them control of your computer. Once they have access, they may show you fake error messages or system logs to convince you the threat is real, then demand payment for antivirus software, tech support, or PC repair services. Payment is usually requested via gift cards, bank transfer, or cryptocurrency, which cannot be reversed. Some scammers then use the remote access to steal passwords, banking details, or install actual malware. Others simply disappear after taking payment, leaving you without help and potentially with a compromised device.
How to verify if it is genuine
Microsoft will never contact you by phone, email, or pop-up to warn you about viruses or security problems. If you receive an unsolicited call claiming to be from Microsoft, it is a scam — hang up immediately. To verify whether a tech support contact is genuine, always initiate contact yourself: visit the official Microsoft website (microsoft.com) and use the contact details listed there, never ones provided in a call or pop-up. Check Microsoft's official support page, which clearly states they do not make unsolicited support calls to customers. If you see a pop-up warning, do not click any buttons or call the number displayed — these are fake. Instead, press Ctrl+Alt+Delete to open Task Manager and force-close your browser. For suspicious emails claiming to be from Microsoft, hover over the sender's email address to see the full domain — genuine Microsoft emails come from @microsoft.com addresses. If you are unsure, contact Citizens Advice (0808 223 1133) or check the NCSC website for current scam warnings. See our guide on spotting fake websites for more verification techniques.
What to do if you have already interacted
If you have already spoken to a scammer, act quickly to limit damage. First, disconnect your computer from the internet immediately and restart it in Safe Mode to remove any unwanted software they may have installed. Change your passwords for email, banking, and important accounts from a different device — use a password manager if you have one to create strong new passwords. Contact your bank right away if you have shared banking details or made any payments; report the fraud and ask them to monitor your account for suspicious activity. If you paid via gift card or bank transfer, contact the service provider immediately to report the fraud — some payments can still be cancelled if reported quickly. Check your credit file using a free service like Experian or Clearscore to watch for fraudulent accounts opened in your name. If a scammer gained remote access to your device, consider running a full antivirus scan using genuine software like Windows Defender, or taking your computer to a trusted local technician for inspection. Report the scam to Action Fraud (0300 123 2040) and the NCSC to help protect other UK residents.
Reporting this scam in the UK
Report Windows tech support scams to Action Fraud, the UK's official fraud reporting service, by calling 0300 123 2040 or visiting reportfraud.org.uk online. If you received a suspicious email impersonating Microsoft, forward it to the National Cyber Security Centre's Suspicious Email Reporting Service at report@phishing.gov.uk — this helps the NCSC track and shut down scam campaigns. If the initial contact came via SMS or a phone call, report it to your phone provider by forwarding any SMS messages to 7726 (spamreporting short code). Report the pop-up or website to Microsoft directly by visiting the Microsoft Safety Dashboard and submitting details of the malicious site. You can also contact Citizens Advice consumer helpline on 0808 223 1133 for advice on next steps if you have lost money. If you shared passwords or banking details, notify your bank and any other organisations where you use those credentials. Report the fake tech support phone number to Ofcom if it came via a call, as they regulate telecommunications in the UK. Keep records of all communications with the scammer — call times, names, numbers, emails — as this information helps investigators.
Frequently asked questions
Is Microsoft itself a scam, or just this type of support scam?
Microsoft itself is a legitimate company — the scam is when criminals impersonate Microsoft. Real Microsoft products like Windows are genuine, but scammers use Microsoft's trusted name to trick people. If you contact Microsoft directly through their official website or call centre, you will reach legitimate support staff.
I already sent money to a tech support scammer — can I get it back?
If you paid by bank transfer or debit card very recently, contact your bank immediately and ask them to freeze or recall the transaction — some can be stopped if reported within hours. If you paid via gift cards or cryptocurrency, the money is usually gone, as these payment methods cannot be reversed. Report the fraud to Action Fraud (0300 123 2040) anyway, as this creates a record and may help authorities trace the scammers. Some victims have recovered money through their bank's fraud compensation scheme, so always ask your bank about your options.
A pop-up appeared on my screen saying my Windows licence expired — is this real?
No. Windows licence warnings never appear as pop-ups from Microsoft. If your licence has genuinely expired, you will see a watermark on your desktop or be prompted in your Windows Settings — not in a pop-up with a phone number to call. If you see this pop-up, do not click anything on it, do not call the number, and do not download anything. Close your browser using Ctrl+Alt+Delete, then restart your computer. The pop-up is always a scam designed to trick you into calling a scammer.
What is the fastest way to report a Windows tech support scam?
Call Action Fraud on 0300 123 2040 — this is the quickest official reporting route in the UK. If it was a phone call, also forward any evidence to your mobile provider by texting the number to 7726. If it was an email, forward it to report@phishing.gov.uk. If money was already sent, contact your bank immediately before reporting to Action Fraud. The sooner you report, the sooner authorities can investigate and prevent the scammers targeting others.