An integrated threat protection solution designed to detect, investigate, and respond to cyber threats across Microsoft 365 services.
This interaction matches a known pattern of tech support scams and should be treated as a scam, not legitimate Microsoft support.
Key facts from Microsoft guidance that apply to this situation:
- Microsoft does not make unsolicited support calls
- Microsoft will never proactively reach out to provide unsolicited PC or technical support.
- Any phone call from someone claiming to be “Microsoft” or “Windows Support” offering to fix problems, verify orders, or request personal/financial information is considered a scam.
- Error messages and pop-ups from Microsoft never include phone numbers
- Genuine Microsoft error and warning messages never include a phone number to call.
- Any message that directs to call a number for “Microsoft support” is part of a scam.
- Remote access tools like UltraViewer are a common scam tactic
- Scammers frequently ask users to install remote access applications so they can “fix” problems.
- Once connected, they misrepresent normal system messages as serious issues, run fake “scans,” and claim to set up protections such as firewalls.
- During that time they can steal data, install malware, or change settings.
- What to do now Because remote access was granted for several hours, treat the device and accounts as potentially compromised:
- Stop all interaction with the caller or any numbers/websites they provided.
- Disconnect the device from the internet until checks are complete.
- Uninstall UltraViewer and any other software they installed.
- Run a full security scan with Microsoft Defender or the installed antivirus.
- Change passwords for important accounts (email, Microsoft account, banking, etc.) from a known-clean device.
- Monitor financial accounts and sign-in activity for suspicious behavior.
- If any payment or card details were provided, contact the bank or card issuer and report a possible tech support scam.
- How to report the scam
- Use Microsoft’s technical support scam form to report the incident so it can be investigated and used to improve protections.
- Also report the incident to local authorities or consumer protection agencies as appropriate.
- How to avoid this in future
- Never call numbers shown in pop-ups or unsolicited messages.
- Never allow remote access to a device to anyone claiming to be “IT support” unless the contact was initiated through official Microsoft Support or an organization’s IT helpdesk.
- If a browser page locks with a scary warning, close the browser (for example, via Ctrl+Alt+Del → Task Manager → end the browser process) and clear the browser cache.
References:
- Protect yourself from online scams and attacks
- Protect yourself from tech support scams
- Avoid and report Microsoft technical support scams
- Tech support scams
- Solve PC problems remotely with Remote Assistance
- Use Quick Assist to help users
- Solve PC problems remotely using Quick Assist
- Microsoft Defender Scam or Do I have a virus on my computer - Microsoft Q&A
- Windows defender scam - Microsoft Q&A
- How do I report a possible scam from Microsoft? - Microsoft Q&A
- Who do I call for support? - Microsoft Q&A
- why can't you block AnyTech365.com....they are a scam company posing as Microsoft supported, stealing information? - Microsoft Q&A