Tech Support / Geek Squad Scam

High SeverityStableTech Support / Subscription ScamVerified 2026-02-28

Pop-ups, emails, or calls claiming your device has a virus or that a subscription (Geek Squad, Norton, McAfee) is auto-renewing for hundreds of dollars. Scammers gain remote access to your computer to steal data or demand payment for fake services. Geek Squad/Best Buy is the most impersonated brand in the US according to FTC complaint data.

Annual Losses

$1.46B+ in tech support scam losses (FBI IC3 2024)

Avg Loss / Victim

$500-$25,000 (elder victims: $10,000+)

Primary Vector

Email, phone call, browser pop-up

Peak Season

Year-round

How It Works

You receive a fake email invoice claiming your Geek Squad or antivirus subscription auto-renewed for $299-$499, or a browser pop-up screams that your computer is infected. A phone number is provided for a 'refund' or 'support.' When you call, the scammer asks to remotely access your computer using tools like AnyDesk. Once connected, they can steal passwords, install malware, manipulate your bank account screen to fake an 'accidental overpayment,' and pressure you to send money back.

1Victim receives a fake renewal invoice email or sees a fake virus warning pop-up
2Victim calls the phone number provided in the email/pop-up
3Scammer poses as tech support and asks to remote into the computer (AnyDesk, TeamViewer)
4With remote access, scammer may: install actual malware, harvest saved passwords and files, access banking sites
5In the 'refund' variant: scammer manipulates the screen to make it look like they accidentally refunded too much money
6Victim is pressured to 'return' the overpayment via wire transfer, gift cards, or cash
7Some variants sell fake antivirus software ($200-$500) that is actually malware

Example Scam Messages

Hover or tap the highlighted text to see why each element is a red flag.

EXAMPLE 1

Subject: Your Geek Squad subscription has been renewed - Invoice #GS-2026-88412 Dear Customer, Your Geek Squad Total Tech Support plan has been auto-renewed for $349.99Red flag: Fake charge designed to create alarm — you likely don't even have this subscription. If you did not authorize this charge, call our Billing Department at 1-888-555-0234Red flag: Scammer-controlled number, not Best Buy's real support line within 24 hours for a full refund. Invoice: GS-2026-88412 Amount: $349.99 Payment Method: Card ending in ****Red flag: They don't know your card number — using asterisks to seem legitimate while giving zero real info

“auto-renewed for $349.99” — Fake charge designed to create alarm — you likely don't even have this subscription

“1-888-555-0234” — Scammer-controlled number, not Best Buy's real support line

“Card ending in ****” — They don't know your card number — using asterisks to seem legitimate while giving zero real info

Red Flags Checklist

Unsolicited renewal notice for a service you don't remember subscribing to

Scammers count on you not being sure whether you have this subscription — the confusion is the weapon

Phone number provided for 'refunds' instead of a website/portal

Legitimate companies process refunds through their website, not by having you call a random number

Request to install remote access software

A real tech support company you didn't contact will NEVER ask to remotely access your computer

Pop-up warning that won't close, with a phone number

Real malware warnings come from your installed antivirus software, not browser pop-ups with phone numbers

Claim of 'accidental overpayment' requiring you to send money back

This is a classic manipulation — they didn't actually send you money; they edited what your screen shows

Payment demanded via gift cards

No legitimate company accepts refunds or payments via gift cards. Gift card payment = scam, always.

What Real Communication Looks Like

Real Geek Squad/Best Buy communications come from @bestbuy.com email addresses and direct you to bestbuy.com to manage subscriptions. Real antivirus renewals appear in your software's dashboard or your credit card statement — they don't send urgent emails with phone numbers. Legitimate tech support never cold-calls you about viruses.

What To Do

If you just received this message:

Do not call the phone number in the email or pop-up

Check your actual subscriptions and bank statements to verify if a charge occurred

If you have a real Geek Squad subscription, manage it at bestbuy.com/account

For pop-up warnings: close the browser tab (use Task Manager if needed — Ctrl+Alt+Delete on Windows, Command+Option+Escape on Mac)

Delete the email

If you already clicked or gave information:

If someone had remote access to your computer: disconnect from the internet immediately, run a full malware scan with legitimate antivirus software, change all passwords from a DIFFERENT device

If you sent money/gift cards: contact your bank and the gift card issuer immediately

If you installed software they recommended: uninstall it and run a full system scan

Consider having a real IT professional check your computer for backdoors

Change passwords for banking, email, and any other sensitive accounts

Where to report:

FTC: reportfraud.ftc.gov

FBI IC3: ic3.gov

Best Buy's real fraud page: bestbuy.com/scams

Your antivirus company's real website

Frequently Asked Questions

They showed me the refund on my screen. How was that fake?

With remote access, scammers can edit what you see on your screen in real time — including manipulating your bank's website display. They use browser developer tools or HTML editing to change the numbers shown. Your actual bank balance hasn't changed.

Can they actually damage my computer remotely?

Yes. With remote access tools like AnyDesk or TeamViewer, they can install malware, steal saved passwords, access files, and plant backdoors for future access. If they had remote access, treat your computer as compromised.

Sources

FBI IC3 2024 Report ($924M tech support losses)
FTC Consumer Alert: Geek Squad Scams
Malwarebytes Research: Fake PayPal Invoices (Oct 2025)
AARP Tech Support Scam Guide

Got a suspicious message?

Paste it in and get an instant analysis — free, private, no account needed.

Analyze a Message