Microsoft scam calls UK — Windows tech support

Microsoft-impersonation tech-support scam calls have been one of the longest-running UK fraud patterns — well over a decade — and Microsoft still publishes the same simple rule that defeats every variant: Microsoft does not cold-call consumers about Windows security. This guide covers the current 2026 scripts, the AnyDesk / TeamViewer payload, and what to do if you've already been caught. Whether you searched for microsoft scam call, microsoft scam call uk, or windows security scam, this is the right page.

#Script 1 — 'Your computer is sending error reports'

The original and still the most common:

Why it's a scam: Windows doesn't 'send error reports to Microsoft' in any way that triggers an outbound phone call. Microsoft has no relationship with your UK phone provider that would let them get your number. The whole premise is invented.

#Script 2 — the licence-renewal scam

Often arrives as an email first: 'Your Microsoft 365 / Office subscription has been auto-renewed at £279.99'. The email has a phone number for 'cancelling the auto-renewal'. The call walks you through installing AnyDesk to 'process the refund' — at which point the 'agent' takes control of your screen.

#Script 3 — the 'compromised licence' scam

Pop-up appears on your screen (often via a malicious ad): 'Your Windows licence has been compromised. Call Microsoft Support immediately on 0207-...'. The number connects to a scam call-centre that mimics genuine Microsoft support theatre — fake hold music, fake reference numbers, fake escalation to a 'senior technician'.

#What Microsoft themselves say

Microsoft's official scam-protection page is unambiguous:

The same rule applies to every other 'tech support' caller in the UK:

• Apple does not cold-call about Apple ID or iCloud security.
• BT, Sky, Virgin Media, TalkTalk, EE, Vodafone do not cold-call about router compromise, broadband infections or 'IP address banned'.
• Microsoft 365 / Office do not cold-call about subscription renewals.
• Antivirus vendors (McAfee, Norton, Kaspersky) do not cold-call about expired subscriptions.

#How to spot the scam in 30 seconds

1. Did you initiate the call? If no, it's a scam (Microsoft never initiates).
2. Are they asking you to install software? If yes, it's a scam.
3. Are they asking you to open Run / Command Prompt / Event Viewer? If yes, it's a scam (they're about to show you scary-looking but harmless 'error logs' to convince you).
4. Are they asking for payment in vouchers / gift cards / cryptocurrency? If yes, it's a scam.
5. Did they call from a regular UK landline / mobile / 0203 / 0843 number? Real Microsoft inbound is on 0800 026 0330 (UK consumer) or via the Microsoft app — never outbound on a random number.

#What to do if you've already installed AnyDesk / TeamViewer

1. 1

   Disconnect the device from the internet immediately

   Unplug the ethernet cable, turn off Wi-Fi, or pull the laptop's network cable. This stops the attacker mid-action.

2. 2

   Dial 159 from a different device

   Your bank's fraud team. Even if the scammer didn't visibly open your bank app, they may have planted a keylogger. Tell 159 you've been the victim of a tech-support scam — they'll watch the account.

3. 3

   Do not just uninstall — factory reset

   Many tech-support scams install hidden persistent remote-access tools that survive an uninstall. A full Windows / macOS factory reset is the only safe recovery. Back up your documents first to an external drive (NOT to the same device's cloud).

4. 4

   Change every banking + email password

   Do this from a known-clean device (your phone, ideally). Enable 2FA everywhere.

5. 5

   Report to Action Fraud

   actionfraud.police.uk or 0300 123 2040. Tech-support scams against vulnerable adults are increasingly investigated and prosecuted.

#Bottom line

Microsoft will never cold-call you. Every UK 'Microsoft support' inbound call is a scam, no exceptions. The defence is the same as for every tech-support pretext: hang up the moment they ask you to install software. If you've already installed it, disconnect the device, ring 159 from a different device, factory-reset, and report.