Tech & software scams

The Microsoft scam is a screen-filling warning that your computer is infected, with a phone number to call. Microsoft never puts a phone number in an error message, never calls you about a virus, and never needs remote access to a computer you did not ask them to look at.

Apple scams arrive as texts about a locked Apple ID, pop-ups claiming your iPhone is infected, calls from "Apple Support", and receipts for App Store purchases you did not make. Apple will never call you unprompted, never asks for your password or a verification code, and never takes payment in gift cards.

Google scams include fake security alert emails about unauthorized sign-ins, Google Voice verification code scams, and phishing messages pretending to be from Google support. Because your Google account connects Gmail, Drive, Photos, and payment methods, a compromised account exposes your entire digital life. Google will never call you about account problems or ask for your password by email.

Gmail is both a target and the delivery route for nearly everything else. The scams aimed at Gmail itself are fake "unusual sign-in" alerts and storage-full warnings designed to capture your password. Your email account is the master key to every other account, so it deserves the strongest protection you have.

Norton and LifeLock scams involve fake subscription renewal emails claiming you're being charged $300-$500 for a product you never ordered. The email includes a phone number to "cancel." Calling connects you to a scammer who requests remote access to your computer and steals money from your bank account. Norton will never send unsolicited invoices or ask for remote access to process a refund.

McAfee scams involve fake subscription renewal emails, browser popups claiming your McAfee protection has expired, and phishing emails about account problems. These scams use McAfee's brand to either steal your credit card information or connect you with a fake tech support agent. McAfee will never show virus warnings with phone numbers in your browser or send unexpected renewal invoices.

Adobe scams involve fake subscription renewal emails for Creative Cloud or Acrobat, phishing messages about account verification, and fraudulent invoices for products you didn't order. Scammers exploit Adobe's complex subscription model to make fake charges seem plausible. Adobe will never ask for your password or financial information via email.

DocuSign scams come in two forms: fake emails imitating a signature request, and genuine DocuSign envelopes sent by fraudsters carrying a fraudulent invoice. The safe habit for both is the same — never click the button in the email; go to docusign.com and enter the security code instead.

Dell scams are tech-support calls, and the dangerous ones quote your real service tag and purchase details — customer data has leaked more than once, so knowing your machine proves nothing. Dell does not call customers unprompted about a virus or a warranty refund.

HP scams mostly run through printers: a driver you need, a printer that will not connect, and a search that lands on a fake HP support number. HP does not answer support through numbers advertised in search ads, and never needs remote access to fix a driver.

Samsung scams use warranty-expiry calls, fake Galaxy prize draws, and account-phishing texts. Samsung does not call customers about expiring warranties, and every real promotion runs on samsung.com — never through a link asking for a card to claim a prize.

ChatGPT scams are counterfeit apps with hidden subscriptions, fake OpenAI share offerings, and "AI trading bot" investment cons. OpenAI is privately held — nobody can sell you its stock — and ChatGPT is available only at chatgpt.com and through OpenAI's own apps.

LastPass users are phished for one thing: the master password. After encrypted vaults were stolen in the 2022 breach, attackers have been working to obtain master passwords that would decrypt them. LastPass will never ask for your master password, and it cannot recover it.

Dropbox scams use shared-file notifications to get your email password. Some are counterfeit emails; some are real Dropbox links to a document that contains the phishing page. Never sign in to email from a link inside a shared file.

Zoom scams use fake meeting invites that install malware through a bogus update prompt, and fake job interviews run over Zoom chat to harvest personal data. Zoom updates come from inside the app or zoom.us — never from a link in a meeting invite.

Yahoo Mail accounts are targeted because they are old, often carry weak or reused passwords, and still act as the recovery address for bank and shopping accounts set up years ago. The scams are fake security alerts and storage warnings that capture the password.