The pop-up is not the main event.
The remote-control session is.
The Federal Trade Commission describes a common tech-support scam in which a bogus warning claims the computer has a virus or other serious problem and tells the user to call for help. The supposed technician then asks for remote access to the computer, pretends to diagnose an infection, and sells an unnecessary repair or uses the access for something worse.
See the FTC’s guide to tech-support scams.
Remote access changes the problem completely
Before remote access is granted, the scammer has a story.
After remote access is granted, the scammer may be able to see what is on the screen, manipulate files, install software, observe passwords, or guide the victim through banking and payment steps while appearing to “fix” the machine.
The FTC has brought cases involving operators who used frightening pop-up advertisements, claimed affiliation with Microsoft or Apple, and persuaded people to allow remote access. Once connected, the operators pointed to harmless system information as supposed evidence of infection and sold unnecessary services.
See the FTC’s 2019 refund announcement involving a tech-support operation.
The crucial move is therefore not the fake scan. It is the transfer of control.
Break the chain before the technician becomes “trusted”
If an unexpected warning tells you to call technical support, do not use the number in the warning.
If someone contacts you unexpectedly and says your computer has a problem, do not give that person remote access.
Instead, close the message and contact the software vendor, device manufacturer, employer help desk, or another trusted technician through contact information you obtained independently.
Microsoft states that it does not make unsolicited calls offering technical support and that genuine Microsoft error messages do not include phone numbers telling users to call.
See Microsoft’s tech-support scam guidance.
A convincing scammer may know real technical terms. The remote-access program itself may also be legitimate software commonly used by actual support departments.
Neither fact proves the person on the other end should control the machine.
The authority has to be verified before access is granted, not after the stranger is already moving the mouse.