The anatomy of a tech-support scam: how scammers steal $38,000 in 20 minutes

It never looks like a robbery. There's no broken window and no stranger at the door — just a friendly voice on the phone, a computer screen, and about twenty minutes. By the end, an older person's life savings can be gone, and they'll often thank the person who took it. Here's exactly how it happens, step by step.

The most important thing to understand is this: a tech-support scam is not a hack. It's a performance. No virus breaks in. Instead, the scammer convinces a real person to open the door themselves — to install software, grant access, and move money — all while believing they're being helped. That's why it works on smart, careful people, and it's why ordinary antivirus does nothing to stop it.

Act by act: how the 20 minutes unfold

1. The hook: a fake alarm

   It starts with a full-screen pop-up — "Your computer is infected! Do NOT shut down. Call Microsoft Support now." Often it beeps or reads the warning aloud. Sometimes it's an unsolicited phone call instead. The goal is the same: create instant fear and a phone number to call. The "problem" is fake, but the panic is real.

2. The voice: building false authority

   On the line is a calm, professional "technician" — from Microsoft, Apple, or the bank. They sound official, use technical words, and take control of the conversation. They reassure your parent that they've called the right place and that everything will be fine if they just follow along.

3. The handover: remote access

   This is the pivotal moment. The technician asks your parent to install a remote-access program — usually AnyDesk or TeamViewer — and read out a code. These are real, legitimate tools. But once your parent shares that code, the scammer can see and control their screen. Antivirus sees normal software being installed normally, so it stays silent.

4. The theater: a fake "diagnosis"

   Now the scammer performs. They open harmless system windows that look alarming to a non-expert — error logs, network screens, blinking text — and narrate a crisis: "See all these red entries? Hackers are in your account right now." It's pure theater, designed to deepen the fear and justify what comes next.

5. The payment: the money leaves

   With trust and access secured, they direct the money. Sometimes it's a "fee" for repairs or a "security service." A common twist is the fake refund: they claim to refund a small amount, pretend to "accidentally" send too much, and pressure your parent to repay the difference in gift cards, a wire, or a bank transfer. Because they control the screen, they can even make bank balances appear to change.

6. The cover-up: keeping it quiet

   Finally, they coach silence: "Don't tell the bank the real reason — they won't understand." "Let's keep this between us until it's fixed." This buys time and isolates the victim, which is why families often find out only after the money is long gone.

Why their antivirus doesn't help

People assume good antivirus will catch this. It won't — and not because the software is bad. Antivirus is built to stop malware: hostile code that sneaks in. A tech-support scam contains none. Every dangerous step is something the person is persuaded to do themselves: install a real program, share a real code, approve a real transfer. From the computer's point of view, nothing is wrong. The breach is human, not technical.

Why it works so well on older adults

It isn't about intelligence. Scammers engineer three pressures at once: authority (posing as a trusted institution), urgency (act now or lose everything), and often isolation (no one nearby to sanity-check). Older adults are also more likely to be home, alone, and reachable by phone — and, once remote access is granted, the whole thing can be over before anyone else in the family knows it began.

How to stop it — before the 20 minutes start

The scam depends on speed and secrecy. Take those away and it collapses. A few things genuinely help:

• Agree a family rule, out loud

  "If anyone ever asks you to install software or read them a code — hang up and call me first." This one sentence stops most of these scams cold.

• Remove remote-access apps they don't use

  If AnyDesk or TeamViewer aren't needed, uninstall them so there's nothing to hand over.

• Put a safety net on their browser

  Because you can't sit beside them 24/7, the practical answer is software that blocks the scam sites and tells you the moment something happens.