How to Identify and Locate a Tech-Support Scammer

A tech-support scam is a confidence trick that uses fear of a “hacked” or “infected” computer to get a stranger onto your phone, then onto your screen, and finally into your wallet. The popup is only the hook. The real damage happens during the call, when a calm, professional-sounding “technician” walks you through installing remote-access software and then runs the rest of the con while you watch. Microsoft, Apple, Google, Norton, and McAfee do not put phone numbers in security warnings, so any browser alert with a number to call is, by itself, the tell.

The popup variant. You land on a malicious page, often through a mistyped address or a poisoned ad, and the screen locks into a full-screen warning that copies the real brand’s logo, colors, and error-code style. It shouts that your computer is blocked or your files are about to be deleted, sometimes with an alarm sound on a loop that you cannot mute, and it shows a toll-free number to call “Microsoft” or “Apple support.” There is no virus. The popup is just a web page designed to panic you into dialing.

The cold-call variant. Here the scammer calls you, claiming to be from a software or security company that “detected a problem” on your machine. To prove it, they have you open Windows Event Viewer, a normal system log full of harmless warnings, and they point at routine entries as “proof” of a serious infection. Then comes the request to install AnyDesk, TeamViewer, or a similar tool so they can “fix” it, which hands them full control.

The refund and overpayment variant. This one targets people who were scammed before, or who once paid for “tech support,” with a message that the company is “closing” or “owes you a refund.” They take remote control to “process” it, then stage a fake overpayment: they move money between your own accounts, or edit the HTML on your screen so the bank page appears to show that they sent far more than promised, claiming they wired you several thousand instead of a few hundred. Embarrassed and confused, you are pressured to “return the difference” in gift cards, wire transfer, or cryptocurrency, methods chosen because they are fast and hard to reverse.

The first priority is to cut their access and lock down your accounts, because a scammer who had remote control may have planted tools, viewed saved passwords, or set up a way back in. Then preserve evidence and report. File with the Federal Trade Commission, which is the federal intake for tech-support fraud, and with the FBI Internet Crime Complaint Center, whose complaints feed investigations and asset-recovery efforts. The official FTC tech-support scam guidance walks through spotting, avoiding, and reporting these cons in plain language.

Most articles about tech-support scams stop at “hang up and report it.” That advice is correct and necessary, but it leaves the victim with no answer to the question they actually have: who did this, and is there anything I can do to them? This is where lawful public-records research and skip tracing come in, and where People Locator Skip Tracing works. We do not hack, we do not pretext, and we do not access anything we are not legally permitted to. We take the identifiers you already have and run them through investigative-grade public-records sources for a lawful, permissible purpose, the same approach behind our work on fraud investigation generally.

On the money side, a domestic receiving account, the mule in a refund scam, is often the single most productive thread, because a US bank account is opened in a name tied to an address, a phone, and associates that public records can surface. A phone number can be developed the way we describe in our guide to identifying a scammer by phone number, and a number used in a calling con can be worked through a focused phone-scam caller investigation. An email or username opens its own paths, covered in our walkthrough on finding someone by an email address. When you have a name but no idea where the person is, that is the core problem our pages on finding the person who scammed you and the broader playbook for tracking down someone who scammed you were built to solve.

A named, located individual or company changes what is possible. It gives the FTC and FBI complaints a concrete subject instead of an anonymous “overseas caller.” It gives your bank’s fraud team and any payment dispute something specific to act on. And it is the prerequisite for a civil claim, since you cannot sue or pursue a judgment against someone you cannot name and serve. We are honest about the limits, too: sometimes the trail ends at a foreign call center with no domestic handle, and we will tell you that rather than sell false hope.

Send us what you have, even if it feels like nothing: a callback number, a “refund” email, the name on a wire, a gift-card receipt, a remote-session ID, or the website the popup came from. We work strictly for lawful, permissible purposes, we never promise an outcome we cannot control, and we tell you honestly what the records can and cannot show. For a legitimate matter, an initial locate typically comes back within 24 hours.