The scam may not truly begin until the phone rings.
By Elizabeth Ndungu | Founder, Ndungu Consulting | Tech Coach for Adults 50+
You are using your computer when a warning suddenly fills the screen.
It may show a Microsoft, Apple, or antivirus logo. It says your computer is infected, your information is at risk, or your security has expired.
Then it gives you a phone number to call.
Do not call it.
Close the window. If you cannot close it, restart the computer.
The warning is usually fake. But the pop-up may be only the first step in a larger scheme the FBI calls the Phantom Hacker scam. Some victims have lost their entire life savings.
The Three Steps of a Phantom Hacker Scam
The scam often arrives in stages. Each caller appears to confirm what the previous caller said.
1. The fake tech-support worker
The scammer claims to work for Microsoft, Apple, your antivirus company, or another trusted business.
They ask you to install software so they can connect to your computer. Once connected, they pretend to run a security scan.
They may then ask you to open your bank account to check for suspicious transactions.
This lets them see where you bank and how much money may be available.
2. The fake bank representative
A second person calls, claiming to work for your bank or its fraud department.
They say hackers have reached your accounts and your money must be transferred to a “safe account.”
There is no safe account. The money goes to the criminals.
3. The fake government official
A third caller may claim to represent the FBI, the Federal Reserve, the Treasury, or another government agency.
They confirm the false story and tell you to cooperate.
By this point, three people appear to agree. That is what makes the scheme convincing.
Five Phrases That Should End the Call
Hang up if anyone says:
“Do not tell your family or your bank teller.”
Secrecy keeps trusted people from warning you.
“Move your money to a safe account.”
Never transfer money based on instructions from an unexpected caller.
“Buy gift cards, cryptocurrency, or gold.”
Real banks and government agencies do not protect money this way.
“A courier will collect the cash or gold.”
No legitimate agency sends someone to your home to collect valuables.
“Stay on the phone while you go to the bank.”
The scammer wants to stop you from speaking privately with someone who may recognize the fraud.
What to Do When the Pop-Up Appears
First, do not call the number or click any buttons inside the warning.
Try these steps:
- Press the Escape key.
- Close the browser tab.
- On Windows, press Alt + F4 to close the browser.
- On a Mac, press Command + Q.
- If the computer remains frozen, restart it.
A forced shutdown may cause you to lose unsaved work, but it is better than allowing a stranger to control your computer.
Seeing a fake alert does not automatically mean someone has accessed your device. The risk increases if you downloaded software, entered information, or allowed remote access.
Helen’s Story
Helen saw a warning on her screen and called the number it displayed.
The person who answered claimed to work for Microsoft. He told her there were 36 hackers inside her computer.
He also appeared to know where she banked, which made him sound legitimate. He then persuaded her to install software that gave him remote access.
Another person, posing as a bank representative, told Helen that her money was being stolen. She needed to move it quickly to keep it safe.
Helen followed the instructions. She withdrew cash, bought gift cards, and sent wire transfers and cashier’s checks.
She lost most of her retirement savings before a bank fraud investigator persuaded her to speak to her family.
AARP shared Helen’s story with her permission. It shows why these scams are so effective. The criminals did not simply ask for money. They created fear, appeared to know personal details, and introduced new callers who supported the same story.
What to Do If Someone Had Remote Access
Do not use the affected computer for banking, email, or shopping until it has been checked.
Take these steps:
- Disconnect the computer from the internet.
- Call your bank using the number on your card or statement.
- Explain that someone may have accessed your computer.
- Change important passwords from a different, trusted device.
- Ask a trusted technician to remove any remote-access software.
- Check your bank and credit-card activity.
- Report the scam to the FBI’s Internet Crime Complaint Center or your local fraud-reporting service.
Act quickly, even if you did not send money. The scammer may have seen passwords, financial information, or personal documents.
Watch a Real Scam Call
Jim Browning records real tech-support scams and shares them on YouTube.
His videos show the fake warnings, remote-control software, scripted conversations, and pressure tactics that scammers use. In some cases, he can see inside the call centers and tries to warn victims or their banks before money is sent.
Search YouTube for:
Jim Browning tech support scam
Watch one with a family member or trusted friend. Some recordings can be upsetting, but hearing the scammers’ language may help you recognize it later.
Is Your Computer Safe After a Fake Pop-Up?
It is usually safe if you did not call the number, download anything, enter information, or allow remote access.
Run a security scan after restarting the computer. Do not return to the website that displayed the warning.
If someone connected to your computer, treat the device as compromised and have it checked before using it for anything sensitive.
The Rule to Remember
A real virus warning from your computer does not ask you to call a stranger.
Microsoft, Apple, your bank, and the government will not ask you to move money into a “safe account.”
When an unexpected caller combines urgency, secrecy, and money, hang up.
Call your bank yourself using the number printed on your card.
I write about online safety and digital literacy for adults over 50. Follow me here on Medium to see future articles.
The Basic Computer Skills Guide is available here:
https://elizabethw2.gumroad.com/l/basiccomputerguide
About the Author
Elizabeth Ndungu is the founder of Ndungu Consulting, a technology coaching and digital literacy practice that helps adults over 50 build confidence with computers, phones, AI tools, email, Microsoft Office, online safety, and other digital skills.
Sources
- FBI, “The Phantom Hacker: FBI Warns Public of New Financial Scam”
https://www.fbi.gov/contact-us/field-offices/phoenix/news/press-releases/the-phantom-hacker-fbi-phoenix-warns-public-of-new-financial-scam - FBI Internet Crime Complaint Center, Annual Reports
https://www.ic3.gov/AnnualReport/Reports/Reports/ - IC3 Elder Fraud information page:
https://www.ic3.gov/CrimeInfo/ElderFraud - AARP, “Tech Support Scams on the Rise, Know the Warning Signs”
https://www.aarp.org/money/scams-fraud/fake-online-tech-support/ - AARP, “Inside an International Tech-Support Scam”
https://www.aarp.org/money/scams-fraud/info-2021/international-tech-support-scam-exposed.html - AARP’s The Perfect Scam, “Hacker Uses Skills to Take Down a Phone Scam Operation”
https://www.aarp.org/podcasts/the-perfect-scam/info-2021/jim-browning.html
Tags:
Online Safety · Cybersecurity · Adults Over 50 · Digital Literacy · Fraud Prevention
Leave a Reply