Possible Hack and employee impersonation

Jim Crary 0 Reputation points
2026-08-06T14:04:04.2966667+00:00

Good Morning

Two days ago, I had a pop up on my laptop alerting me to a possible hack and need to call 844-341-9359. A man answered the line said his name was Paul Harris with Microsoft. He gave his ID # MSC 4632 then informed me I need to call an encrypted phone # 412-423-6375. I dialed # he answered and instructed me that there has been a hack and needed to assist me with my computer to investigate where possible hacker could be. We were on the phone 2 hours he was moving me from screen to screen; we finished our conversation on a screen named Resource Monitor he informed me we need to leave this screen open for next 24 hours for him and his team to investigate. I do want to share that the alert notification appeared on my laptop, but he wanted me to us PC desktop to research issues.

Thank You, Jim Crary,

Microsoft Security | Microsoft Identity Manager
0 comments

1 answer

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2026-08-06T14:04:24.36+00:00

    This matches a tech support scam, not legitimate Microsoft support.

    Key signs from the described incident:

    • Microsoft does not make unsolicited phone calls to say there is a problem with a device.
    • Microsoft error and warning messages never include phone numbers.
    • Scammers often ask for remote access, move through normal system screens, and misrepresent them as proof of a problem.

    Immediate actions:

    1. Disconnect the affected devices from the internet right away if there is any chance remote access software is still active.
    2. Do not call the numbers again and do not leave any browser warning page open.
    3. Close the scam page. If the browser is stuck, open Task Manager and end the browser task. If needed, restart the computer. When reopening the browser, do not restore the previous session.
    4. Report the scam at https://www.microsoft.com/reportascam.
    5. If a suspicious site triggered the pop-up in Microsoft Edge, use Settings and More > Help and Feedback > Report unsafe site.

    If remote access was granted or software was installed, treat the PC as compromised:

    1. Disconnect it from the internet.
    2. Back up important personal files.
    3. Reset the PC using Shift + Restart > Troubleshoot > Reset this PC and choose the option that deletes everything. This is a destructive step and removes apps, settings, and local data not backed up.
    4. After the reset, change passwords for the Microsoft account and other important accounts used on that computer, and enable two-step verification where available.
    5. Monitor account activity closely for unusual sign-ins or changes.

    Important:

    • Microsoft will never ask for payment by gift cards or cryptocurrency for support.
    • If the incident feels urgent, Microsoft Support and Global Customer Service are listed as urgent options in the support article, and notifying local law enforcement is also recommended there.
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

    1 person found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.