The pop-up that costs families over a billion dollars a year

It usually starts with the computer itself acting wrong. A window fills the screen — sometimes with a siren sound — warning that the machine is infected, that personal files are at risk, that data is being stolen right now. There's a phone number. It looks official. It might even say Microsoft, or Apple, or the name of the antivirus software already installed. There's no time to think, and that's the point.

This is the tech-support scam, and among the scams that specifically target older adults, it's one of the two most expensive categories that exist — federal crime-complaint data for 2025 puts tech and customer-support fraud losses among people 60 and older at just over $1 billion for the year, behind only investment scams. It's not a fringe threat. It's one of the two biggest.

The scam doesn't need to break into a computer. It needs someone to let it in — and it's built entirely around getting that invitation as fast as possible.

How it actually plays out

The fake warning is step one. Step two is the phone call, either because the pop-up listed a number or because a caller reaches out first claiming to already know about "an issue detected on your account." Once someone's on the phone, the script moves fast: a request to install a remote-access tool "so I can see what I'm looking at," then a walk-through of the computer that's designed to look alarming — random system files described as evidence of hackers, a folder count presented as stolen data.

The ask that follows is the actual scam: a "removal fee," a "protection plan," sometimes framed as a refund the caller needs to "return" — which requires logging into a bank account while the scammer is watching, often followed by a claim that they refunded too much and need the difference sent back, immediately, by gift card or wire.

Why this works on careful people

The pop-up creates urgency about something technical — the one area where most people, of any age, don't trust their own judgment. That's the actual design. It doesn't need the target to be careless. It needs a moment where "I don't know what this is, better safe than sorry" overrides "I should hang up and check."

The one rule that stops it cold

That single fact ends the scam before it starts. If a warning appears with a number to call, the response is the same every time: close the browser (or restart the computer if it won't close), and never call a number that appeared in a warning message. If a "technician" is already on a call asking for remote access, hang up — real support does not initiate contact this way.

If remote access already happened

Disconnect the computer from the internet, then a trusted person or professional should run a full security scan or reset the machine. Change passwords for anything that was open during the session — email and banking first — from a different, uncompromised device. If any payment was made or account information shared, treat it exactly like a financial scam: call the bank on the number printed on the card, not one given during the call, and report it.