Nobody from Microsoft is calling you about a virus
We have spent this module on text and email. Now consider the phone, because it presents a different kind of pressure. There is a voice. It sounds calm and official, and it often carries an accent that people assume signals a "real tech company," for reasons I have never understood. It signals nothing of the kind. It never has.
Here is the flat fact to leave with today: Microsoft does not call you. Apple does not call you. Neither does your internet provider, not unprompted, not to report a virus on your computer. They have no means of detecting such a thing, and no reason to call you about it even if they could. If your phone rings and someone says "we have detected a virus on your computer," you are already speaking to a scammer. No version of that sentence is legitimate.
How this one actually works
The call typically opens with something alarming: a virus, suspicious activity, sometimes a claim that your IP address is "sending spam," as though that were an accusation a person makes. The goal is to rattle you before you have had a chance to think.
They then direct you to your computer. They walk you through opening something like Event Viewer, a perfectly normal Windows tool that logs routine background activity, which is full of red and yellow warning icons that look alarming to anyone seeing them for the first time. They point at those and say "see, there is the virus." It is not a virus. That is simply how the screen always appears. I have checked mine: full of warnings, and the computer runs fine.
Once you are sufficiently frightened, they request remote access. A program, usually one with a legitimate name such as TeamViewer or AnyDesk, that lets them view and control your screen. Once inside, they can do anything you can do. Move money. Install actual malware. Examine your files. And they will certainly attempt to charge you for "removing" the fake virus, generally by gift card or wire transfer, which is its own red flag we have covered before.
What actually happened to my neighbor Kylie
My neighbor Kylie received this call. It sounded professional, she said. The caller used computer terms she did not know. She granted access to her machine before she had fully considered it, and by the time she called me she had already given them a solid ten minutes of control.
We spent the afternoon wiping the computer and setting it up fresh. Unpleasant, but manageable. I want to be clear on one point, because I state it every time someone shares a scam story: I do not fault Kylie in the slightest. She is not careless. She was on the phone with someone whose entire job that day was to convince her, and he was skilled at it. That is the job. This happens to sharp, capable people. It is not a failure of intelligence; it is a matter of being caught on an ordinary Tuesday when you were not expecting it.
What to actually do
If you receive one of these calls, here is the plan, deliberately short:
- Hang up. Not rudely, simply end it. You owe a scammer no polite exit.
- Do not let anyone remote into your computer because of a call you did not initiate. Ever. Without exception. If your actual internet provider or a company you already do business with needs to examine something, you call them back at the number on your bill or account, not a number they gave you on the call.
- If you already let someone in, disconnect from the internet first, unplug the ethernet or turn off wifi, then shut the computer down. Have it examined before you use it again for anything involving passwords or banking.
- If you provided payment information or bought gift cards, call your bank and the card issuer immediately. The faster you act, the more options remain.
The one opinion I will press on you here
Antivirus software is largely a distraction at this point. People buy the subscription, feel protected, and then click the bad link anyway or admit the fake technician through the front door because he asked politely. Your habits matter far more than whatever software runs in the background. The habit that matters most here is simple: no legitimate party calls you cold about a virus. If the phone rings with that story, you know it is fake before they finish the sentence.
This one is genuinely easier than the email scams once you know the single rule. There is no link to inspect, no address to check. Only: did I call them, or did they call me? If they called me, hang up.
Before next time
If you have an older parent or a neighbor who lives alone, tell them this one thing aloud this week: nobody from Microsoft is ever going to call about a virus. That sentence alone stops most of these cold.
~kenneth