Platform page

Microsoft scams

Microsoft scams are among the most common tech support fraud patterns. Fake virus warnings, Windows Security pop-ups, and Office 365 account alerts push users to call scam support numbers or grant remote access to their computers.

16 scams in this platform viewAll platforms

Common searches

microsoft scammicrosoft tech support scammicrosoft scam callwindows virus scamoffice 365 phishing

Watch for

  • A pop-up claims your computer is infected and provides a phone number to call.
  • Microsoft calls you about a problem β€” Microsoft does not make unsolicited support calls.
  • A support agent asks you to install remote access software like AnyDesk or TeamViewer.
  • An email about your Microsoft 365 account links to a non-Microsoft domain.
Account takeover
↑ 60%

Microsoft 365 admin consent scam

A fake Microsoft security or compliance workflow asks a business user or admin to approve an app request that silently grants attacker access.

What to do first

Review app consent requests directly from the official admin console before approving anything.

Targets

IT admins

Seen in

Global

Tech support scams
↑ 64%

Microsoft impersonator tech support scam

Scammers impersonate Microsoft support via calls, emails, or popups, claiming your Windows license or account is compromised and demanding payment or remote access.

What to do first

Microsoft never makes unsolicited tech support calls or sends unsolicited security warnings with phone numbers

Targets

Windows users

Seen in

U.S.

Tech support scams
↑ 64%

fake blue screen of death scam

Malicious websites or software trigger a fake Windows blue screen error with a tech support phone number, tricking victims into calling scammers.

What to do first

Press Ctrl+Alt+Delete or force-restart the computer as real blue screens never include phone numbers

Targets

Windows users

Seen in

U.S.

Gift card scams
↑ 23%

tech support gift card payment scam

A fake tech support agent claims your computer is infected or your account is compromised and demands payment in gift cards to fix the issue.

What to do first

Legitimate tech companies never demand payment in gift cards β€” hang up or close the pop-up.

Targets

Older adults

Seen in

U.S.

Fake antivirus scams
↑ 100%

browser popup virus alert scam

A full-screen browser popup mimics a Windows or macOS system alert, claiming your computer is infected and urging you to call a phone number or download software immediately.

What to do first

Force-close the browser using Task Manager (Ctrl+Alt+Delete) or Force Quit (Cmd+Option+Esc) β€” do not call the number.

Targets

Non-technical users

Seen in

U.S.

Fake antivirus scams
↑ 100%

fake Windows Defender alert scam

A webpage or popup imitates a Windows Defender notification, warning of detected threats and directing the user to call a support number or download a removal tool.

What to do first

Close the browser tab or force-quit the browser β€” real Windows Defender alerts never appear in a browser.

Targets

Non-technical users

Seen in

U.S.

Tech support scams
↑ 64%

Windows license expired popup scam

A fake browser popup claims your Windows license has expired and you must call a support number or pay immediately to reactivate, leading to tech support fraud.

What to do first

Close the browser using Task Manager (Ctrl+Alt+Delete) if the popup cannot be dismissed normally.

Targets

Windows users

Seen in

U.S.

Brand impersonation scams
↑ 60%

Microsoft 365 renewal phishing scam

A phishing email claims your Microsoft 365 subscription is expiring and you must update your payment information, redirecting to a fake Microsoft login page.

What to do first

Check your subscription status directly at account.microsoft.com, never through email links.

Targets

Business professionals

Seen in

U.S.

Email phishing scams
↑ 80%

Teams meeting invite phishing scam

A fake Microsoft Teams meeting invitation arrives by email, and clicking the join link leads to a credential harvesting page disguised as the Teams login.

What to do first

Hover over the meeting link before clicking to verify it points to a legitimate Microsoft domain.

Targets

Business professionals

Seen in

U.S.

Email phishing scams
↑ 80%

Outlook account suspended phishing scam

A phishing email warns that your Outlook or Hotmail account has been suspended for violating terms of service, urging you to verify your identity on a fake page.

What to do first

Sign in to your Outlook account directly at outlook.com to verify its status β€” if you can log in, it is not suspended.

Targets

Email users

Seen in

U.S.

Tech support scams
↑ 64%

fake Microsoft support call scam

A caller claiming to be from Microsoft says they have detected a virus or security problem on your computer and requests remote access to fix it for a fee.

What to do first

Hang up immediately β€” Microsoft will never call you unsolicited about your computer.

Targets

Older adults

Seen in

U.S.

Email phishing scams
↑ 80%

OneDrive sharing notification phishing scam

A fake OneDrive sharing notification email claims someone shared a document with you, but the link leads to a credential-stealing page.

What to do first

Verify the sender by contacting them through a separate channel before clicking any shared document link.

Targets

Business professionals

Seen in

U.S.

Brand impersonation scams
↑ 60%

Xbox account compromise scam

Scammers contact Xbox players claiming their account has been compromised, asking for login details or payment to restore access.

What to do first

Never share your password or two-factor codes with anyone β€” Xbox Support will never ask for them.

Targets

Gamers

Seen in

U.S.

Tech support scams
↑ 64%

Windows Defender alert popup scam

A fake browser popup mimics a Windows Defender alert claiming your computer is infected, urging you to call a fraudulent support number immediately.

What to do first

Press Ctrl+Alt+Delete and use Task Manager to force-close the browser β€” do not call the number.

Targets

Windows users

Seen in

U.S.

Brand impersonation scams
↑ 60%

Azure billing phishing scam

IT administrators receive fake Azure billing alerts claiming unusual charges or failed payments, leading to credential theft through a fake Azure portal login.

What to do first

Verify billing directly at portal.azure.com β€” never use links from email notifications.

Targets

IT administrators

Seen in

U.S.

Brand impersonation scams
↑ 60%

LinkedIn recruiter scam

Fake recruiters on LinkedIn offer dream job opportunities, then request personal information, fees for training, or install malware through fake application documents.

What to do first

Verify the recruiter by checking their LinkedIn profile history and confirming their identity through the company's official website.

Targets

Job seekers

Seen in

U.S.

Related platforms