The phone rings. A polite voice, often with a foreign accent, says they're from Microsoft (or "Windows support", or your internet provider) and that your computer is sending out errors or has a virus. It sounds technical, it sounds urgent, and it is a scam. Portuguese authorities, including the Public Prosecution Service's cybercrime office, have been warning about this exact one for years.
How it usually goes
- The hook. An unexpected call, or a pop-up in your browser that locks the screen and shows a phone number "to call Microsoft immediately".
- The "proof". They ask you to open ordinary Windows screens, such as the Event Viewer, which always shows red warnings on every computer, and tell you those are the infection.
- The remote access. They ask you to install a remote-control program (AnyDesk, TeamViewer, Quick Assist) so they can "fix it". Now they're sitting at your computer.
- The payment. You're asked to pay for "protection" or "a licence", by card, transfer, gift cards or MB WAY. Some go further and talk you into logging into your bank "to check for fraud", then empty the account.
The red flags
- Microsoft does not phone people about problems with their computers. Neither do Windows, Apple, your bank's "security team" asking to take control, or anyone else you didn't contact first.
- Urgency and fear. "Your accounts will be blocked today." Real companies don't work like this.
- Anyone asking to take over your screen after an unexpected call.
- Payment by gift card, transfer or MB WAY for a "fix".
- A caller ID you recognise is not proof. Numbers can be faked, and scammers have even used the police's number.
What to do when it happens
Hang up. You don't owe them politeness, an explanation or "just one minute". Don't press any keys they suggest, don't install anything, and don't call back a number they gave you. If it was a pop-up, close the browser (use Task Manager or restart the computer if it won't close), and don't call the number on it.
If you already let them in
- Disconnect from the internet straight away (Wi-Fi off or cable out). That cuts them off.
- Call your bank if you paid, or logged in to your bank while they were connected. Ask them to block cards and review recent transactions. Speed matters here.
- Uninstall the remote-control program, or ask me to do it, and run a full antivirus scan. See what to do if your computer might be infected.
- Change your passwords from another device, starting with email and banking, and turn on two-factor authentication.
- Report it. You can file a report with the police (PSP or GNR), and the cybercrime office of the Public Prosecution Service has information on how to report online crime. It's not your fault. These people do this for a living, and plenty of careful, intelligent people get caught.
A rule that makes this easy
If an unexpected call or message tells you your computer has a problem, the answer is always "no, thanks", and you hang up. If you want to be sure, call me and ask. A two-minute question is much cheaper than fixing an emptied bank account.
Not sure about a call or message? Get in touch →
Related: MB WAY and SMS scams, how to spot a phishing email and the heads-up board.