Over the past three months, our Tulsa repair shop has seen a sharp increase in clients arriving with computers compromised by tech support scammers. The pattern is consistent: a full-screen browser pop-up appears claiming the computer is infected, a fake "Microsoft" or "Apple" phone number is displayed, and the victim is pressured into granting remote access and paying hundreds of dollars for unnecessary services. In several cases, scammers installed legitimate remote access tools that gave them persistent, ongoing access to the victim's machine long after the initial call ended.

This is not a new scam, but the 2026 versions are more convincing than ever. The pop-ups mimic real Windows Security alerts down to the font and icon details. The phone operators speak fluent English and follow polished scripts designed to create panic. Tulsa residents of all ages and technical skill levels are being targeted, and the financial and emotional toll is significant.

How the Scam Works Step by Step

1. The hook. While browsing a normal website, a pop-up fills the entire screen with a fake virus warning. The message claims your computer is locked, your data is at risk, and you must call a toll-free number immediately. The pop-up often plays an audio alert or uses the browser's full-screen mode to prevent you from closing it easily.
2. The call. When the victim calls the number, a person posing as a Microsoft, Apple, or Norton support agent answers. They use technical-sounding language to convince you the threat is real and urgent.
3. Remote access. The scammer asks you to download a remote access tool such as AnyDesk, TeamViewer, or ConnectWise. Once installed, they have full control of your computer and can see everything on your screen, access your files, and install software without your knowledge.
4. The sale. After pretending to run diagnostic tools, the scammer claims to find serious infections or security vulnerabilities. They offer a "protection plan" or "cleanup service" for $200 to $800, payable by credit card or gift cards.
5. The aftermath. Even after the call ends, the remote access software may remain installed, giving the scammer the ability to return to your computer at any time. Some scammers install keyloggers or browser extensions that capture passwords and financial information during future sessions.

What to Do If You See a Fake Alert

If a full-screen pop-up appears claiming your computer is infected, do not call the number displayed. Instead, press Ctrl + Alt + Delete on Windows or Cmd + Q on Mac to force-close the browser. If the pop-up returns when you reopen the browser, clear your browsing data and reset your browser settings. The pop-up itself is not a virus; it is a web page designed to look like a system alert. Closing the browser eliminates it completely in most cases.

If the pop-up persists after clearing browser data, or if other symptoms appear such as new toolbars, redirected searches, or unexpected programs, your computer may have adware installed that is generating the pop-ups locally. In that case, a professional malware removal service can identify and remove the underlying infection without putting your data at risk.

What to Do If You Already Gave a Scammer Remote Access

If you allowed a scammer to connect to your computer remotely, the situation requires immediate attention. Here is what to do right now:

• Disconnect from the internet. Unplug your ethernet cable or turn off WiFi immediately to prevent the scammer from reconnecting.
• Do not use the computer for banking, email, or any login activity until it has been professionally cleaned. Any credentials you enter may be captured by software the scammer installed.
• Contact your bank. If you provided a credit card number, call your card issuer to report the fraudulent charge and request a new card number.
• Change your passwords from a different, uncompromised device. Prioritize email, banking, and any accounts where you use the same password.
• Bring the computer to a trusted local repair shop. Our Tulsa computer repair technicians will remove any remote access software, scan for keyloggers and other malware, verify your system's integrity, and ensure no backdoors remain.

We handle scam-cleanup cases at our Tulsa shop on a weekly basis. The process typically involves removing the remote access tools, running deep malware scans, checking startup programs and scheduled tasks for persistence mechanisms, auditing browser extensions, and verifying that the operating system files have not been tampered with.

There is no shame in falling for a tech support scam. These operations are run by professional fraud teams that invest significant resources in making their alerts look real and their phone agents sound legitimate. What matters is how quickly you respond after realizing what happened.

Protecting Tulsa's Vulnerable Residents

Older adults and less tech-savvy individuals are disproportionately targeted by these scams. If you have a parent, grandparent, or neighbor in the Tulsa area who uses a computer, take a few minutes to explain the basic rule: no legitimate company will ever display a phone number in a virus alert. Consider installing an ad blocker in their browser to reduce the frequency of malicious pop-ups, and make sure they know to call you or a trusted local technician instead of the number on the screen.

Our shop is always available to answer questions about suspicious pop-ups or calls. If something looks wrong, bring the computer in or call us at (918) 960-0807 before taking any action suggested by the alert. That single phone call to a trusted local source can save hundreds of dollars and weeks of stress.