Tech Support Scams That End in Crypto Payments

How tech support scams end in crypto payments

It often starts with a pop-up warning on your computer, a search ad, or a call saying your device is infected or your account was hacked. The 'technician' asks for remote access to your computer. They may then transfer you to a fake bank fraud officer or government agent who says your money is at risk. You are told to move savings to a 'safe' place, often by buying crypto, using a crypto ATM, wiring money, or handing cash or gold to a courier. The FBI calls a common version of this the 'Phantom Hacker' scam.

Warning signs of a tech support scam

A pop-up says your computer is infected and gives a phone number to call.
An unexpected call, text, or email from 'Microsoft', 'Apple', your antivirus company, or your bank.
Requests to install software that gives someone remote control of your computer.
A fake refund or subscription renewal that needs you to log in to your bank while they watch.
You are passed from 'tech support' to a 'bank' or 'government' official.
Instructions to move money into crypto, a crypto ATM, gold, or a 'federal' account.
Pressure to keep the matter secret from family and bank staff.

How to avoid tech support scams

Never call a number shown in a security pop-up; close the browser or restart the computer.
Never give remote access to someone who contacted you unexpectedly.
Contact companies only through phone numbers or websites you look up yourself.
Keep your operating system and security software updated.
Remember that real tech companies and banks never ask you to move money into crypto.
Ask a trusted person to check before you act on any 'urgent' security warning.

Gave remote access or paid a fake technician? What to do now

Disconnect the computer from the internet and stop contact with the scammers.
Call your bank and any exchange or crypto ATM operator you used to report fraud and request recalls or freezes.
Have the device checked or cleaned, remove remote-access software, and change passwords from a different, clean device.
Preserve evidence before anything disappears: screenshots of chats, profiles, websites and app screens, plus receipts, emails, and a written timeline. Do not delete conversations or the app.
Report it to the FBI at ic3.gov and to the FTC at reportfraud.ftc.gov, even if the amount is small. Include wallet addresses, transaction IDs (hashes), amounts, dates, and every website, app, username, and phone number involved. See /guidance/report-crypto-theft-fbi-ic3.
Watch for recovery scams. Anyone who contacts you offering to get your crypto back for an upfront fee, or who claims to work with the FBI or IC3, is likely a scammer. IC3 says it will never ask for payment to recover lost funds or refer you to a company that does. See /guidance/can-stolen-crypto-be-traced.

Tech support scams: common questions

A pop-up says my computer is infected and gives a number to call. Is it real?

No. Real security warnings don’t ask you to call a phone number. Don’t call. Close the browser or restart the computer.

I gave a “technician” remote access to my computer. What now?

Disconnect the computer from the internet and stop contact. Call your bank and any exchange you use. Have the device checked or cleaned, remove the remote-access software, and change your passwords from a different, clean device.

Would my bank or Microsoft tell me to move my savings into crypto to protect it?

No. Real tech companies and banks never ask you to move money into crypto, a crypto ATM, gold or a “federal” account. The FBI calls a common version of this the “Phantom Hacker” scam.

They’re sending a courier to collect my cash or gold. Should I hand it over?

No. The courier is part of the scam. Don’t hand anything over, and report it to your local police and to the FBI at ic3.gov.

Tech support scam statistics

IC3 received 17,355 tech/customer support complaints with a cryptocurrency connection, with $1,226,298,080 in reported losses, in 2025. (source)
The FBI reported 'Phantom Hacker' scams caused over $542 million in losses across about 19,000 complaints from January to June 2023, with those 60 and over accounting for roughly two-thirds of the losses. (source)

Request a case review

This guide is general information, not legal or financial advice. ChainWatch is not a law firm and does not guarantee fund recovery.

Sources

The information on this page was checked against the sources listed in September 2026. Laws, agency guidance, company policies and contact details change, so please verify the current information with the original source before you act.