Report the attempted scam to Microsoft, then use Windows Security on Windows 11 to scan the PC; take additional account or financial-protection steps only if you provided credentials, payment details, or remote access.
1. Report and end contact
- Submit the incident at https://microsoft.com/reportascam. Microsoft specifically requests reports of attempted technical-support scams.^1^
- Block the caller or sender, and do not call any number shown in a warning. Genuine Microsoft error messages do not include telephone numbers, and Microsoft does not proactively contact people to provide unsolicited PC support.^2^
- Preserve relevant screenshots, messages, telephone numbers, receipts, and transaction details, but do not reopen suspicious links or attachments.
2. Check the Windows 11 PC
Save all open work first.
- Open Start → Windows Security → Virus & threat protection.
- Select Scan options → Full scan → Scan now. A full scan checks every file and program.^3^
- After it finishes, return to Scan options and select Microsoft Defender Antivirus (offline scan) → Scan now.
- The computer will restart and scan outside normal Windows, making persistent malware more difficult to hide. After Windows restarts, open Windows Security → Protection history to review the result.^3^
- Apply any quarantine or removal action recommended by Windows Security.
If this was only a browser pop-up and you did not call, click a link, download or run anything, enter information, or permit remote access, close the browser with Alt+F4. Restart the PC if it will not close.^1^
3. If the scammer received access or information
If you installed remote-control software, let the caller control the PC, ran commands for them, or opened a downloaded file:
- Stop using that PC for banking, shopping, or password changes until the scans finish.
- Run the Full scan and Microsoft Defender Offline scan above.
- After the scan reports that threats have been handled, change passwords from a trusted device. Microsoft’s compromised-account procedure explicitly places the full malware scan before changing the password.^4^
- Use unique passwords, starting with email, Microsoft, banking, and any account whose password was disclosed or reused.
- Review the Microsoft account’s Recent activity and report sign-ins that were not yours.^5^
- Add or update account security information and enable Microsoft Authenticator or another stronger sign-in method.^6^
If you disclosed card or bank details, contact the financial institution immediately using the number printed on the card or its official website—not contact details supplied by the caller. Ask its fraud department to secure the account and review transactions.
If identity information was disclosed or accounts were opened or accessed fraudulently, document all actions, close affected accounts through their fraud departments, and consider a police report and fraud alert with a credit bureau. Microsoft’s identity-theft guidance recommends acting immediately and retaining records of communications.^7^
References
- Protect yourself from online scams and attacks | Microsoft Support
- Avoid and report Microsoft technical support scams | Microsoft Support
- Virus and Threat Protection in the Windows Security App | Microsoft Support
- How to recover a hacked or compromised Microsoft account | Microsoft Support
- What happens if there's an unusual sign-in to your account | Microsoft Support
- How to help keep your Microsoft account secure | Microsoft Support
- Protecting yourself from identity theft online | Microsoft Support