Fake tech support / remote access scam — email impersonating Microsoft, Apple, Norton, McAfee, or Windows Defender falsely claims the recipient's computer has a virus, malware, or unauthorized access and directs them to call a toll-free number, avoid restarting, or install TeamViewer/AnyDesk so a "technician" can gain remote control and steal banking credentials or charge for fake repairs
fake-tech-support-remote-access-scam
What this tier means
High-confidence threat indicator — phishing, impersonation, BEC, or scam pattern. Strong contributor to the trash decision.
How Gorganizer detects this
Phishing emails impersonating Microsoft, Apple, Norton, McAfee, Windows Defender, or other security brands falsely claiming the recipient's computer, device, or Mac has been infected with a virus, malware, or unauthorized access — then directing them to call a toll-free number, "do not restart your computer," or download/install remote access software (TeamViewer, AnyDesk) so a "technician" can resolve the issue. The attacker gains full remote control of the device, exfiltrates banking credentials, steals passwords, and typically charges $200–$500 for fake "repairs" via gift cards or wire transfer. Key facts: (1) FTC 2023: tech support scams caused $924M in reported losses — the highest single-category dollar loss among adults 60+, with a median loss of $500; (2) Microsoft, Apple, Norton, and McAfee all explicitly state they never send unsolicited security alerts by email urging users to call a number or grant remote access — any such email is fraudulent; (3) The "do not restart your computer" instruction is a psychological technique to prevent victims from seeking advice or cooling off; (4) Scammers frequently use fake "error windows" as attachments or linked web pages to increase urgency. Warning signs: any email urging a call to a toll-free number about a security threat, "do not restart" instruction, request to download TeamViewer or AnyDesk, sender domain not matching the official security company.
False-positive guard
Every signal in Gorganizer feeds a multi-module score — never a sole verdict. This is a threat-tier signal — it adds a strong contribution to the trash score. The full pipeline still requires convergence across multiple modules + a margin over the safety floor before deletion happens, and Gmail's trash (30-day recovery) is always used — never permanent delete.
About the scoring engine
Gorganizer's scoring engine emits over 1,800 signals across six modules — headers, sender, subject, body, attachments, and structural metadata. Every email is scored by every module independently; the final verdict requires multiple modules to agree and the trash score to beat the safety floor by a margin.
Sacred safety guards — never delete starred emails, replies, calendar invites, receipts/invoices, or attachments — apply unconditionally regardless of any signal.
Ready to clean your inbox?
Gorganizer scans your Gmail with this signal and 1,800+ others, then cleans everything in one click. $4.99 one-time, no subscription.
Get started