fraud on microsoft account

Question

I received an alert when I turned on my laptop this morning and my microsoft account was locked. loud alarm, phone number to call to even turn off the alarm was 855.470.4033. Spoke to three technicians, they asked for remote access, and told me I have multiple viruses and Trojan viruses - I gave them access to my laptop and then also asked for access to my bank dashboard - screen went blank - black - they installed some software to view my screen. Now my bank has determined that this was fraud. Please help me figure out what I can do?

Answer 1

Hi, let me help you with this issue.

I understand you got a pop-up on your screen with a Microsoft technical support number.

The number that showed up on your screen is not an official Microsoft support number. It’s part of a tech support scam. Microsoft does not display phone numbers for you to call on pop-up messages.

Scammers often use pop-up warnings to trick people into thinking their computer has a virus or other issue, prompting them to call a fake support number. Once contacted, scammers may guide victims through steps to gain remote access or install harmful software.

Since you already called the number and went through some steps, it’s important to check your system for potential malware or any unwanted software that might have been installed. Here are the steps you can follow:

Run a Full Antivirus Scan: Use Windows Defender or any trusted antivirus software to scan for any malware.

Check for Unwanted Software: Go to Control Panel > Programs > Uninstall a Program and see if any unfamiliar software has been installed.

Change Your Passwords: If you entered any personal information or allowed remote access, change your passwords (especially for important accounts like email, banking, etc.).

Check for Remote Access Software: Make sure no remote access programs like TeamViewer or AnyDesk have been installed.

Answer 2

This was a tech support scam.

Immediate actions:

1. Disconnect the laptop from the internet right away.
2. Contact the bank and any other financial institutions involved, since access to the bank dashboard was requested and fraud was already detected.
3. Change passwords for the Microsoft account, bank, email, and any other important accounts from a different trusted device.
4. Review Microsoft account sign-in activity:
   • Go to the Security basics page.
   • Select Review activity.
   • If an activity was not recognized, select This wasn't me or Secure your account.
5. On the Microsoft account Security basics page, select Change password and create a strong new password.
6. Run a full scan with Microsoft Defender Antivirus and apply all available security updates.
7. Uninstall any applications the scammers asked to install.
8. Because remote access was granted and software was installed, back up personal files and consider resetting the device to a factory state. This is the safest option after a scammer has changed settings or installed remote-viewing software.
9. Monitor for unusual sign-ins and suspicious account activity.
10. Report the scam to Microsoft at www.microsoft.com/reportascam.

If personal or financial information was stolen, additional steps supported in the guidance are:

• File a police report and keep records of calls, emails, and actions taken.
• Put a fraud alert on credit reports.
• Close accounts that were accessed or opened fraudulently.
• Report identity theft to the FTC at https://ftc.gov/idtheft.

Important facts for this situation:

• Microsoft does not make unsolicited phone calls to fix a computer.
• Microsoft error and warning messages never include phone numbers.
• If remote access was allowed, malware or unwanted software may have been installed.

---

References:

• Tech support scams
• What happens if there's an unusual sign-in to your account
• Protecting yourself from identity theft online
• Protect yourself from tech support scams