Technology
A close call with a Facebook scam that tried to steal credit card info
NEWYou can now listen to Fox News articles!
Have you ever received a suspicious email or pop-up that made your heart race, even for a second? You’re not alone. Online scams are getting more convincing every day, and even the most tech-savvy among us can find ourselves just one click away from trouble.
Phishing is one of the most common ways scammers can access your personal information. Many people fall victim to it every day, which is why this email we received was not surprising.
Just ask “Pamela,” who wrote to us: “I thought I couldn’t be scammed, but I almost was.”
Her story is a reminder that anyone can fall for a well-executed scam. We’ll share what happened to her below, how she caught on just in time, some tips on how to avoid being scammed on Facebook, and how to report it.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Facebook app (Kurt “CyberGuy” Knutsson)
Facebook scam warning: How Pamela almost fell for a tech support hoax
“I was working on my Facebook and it suddenly had a screen flash and voice that said the computer was locked and I needed to call a number to report the breach. I thought it was Microsoft so I called the number. The guy was good. He gave me a name and employee number and we went through some things on my computer which brought up a screen that said ‘scammers were listening’ and my IP was being used on the Porn Hub. I thought, how could that be? But still, I was obtuse.
“The screen listed what he said were all my credit cards that had been compromised, but only the beginning numbers: 3xxx, 4xxx, 5xxx, etc. He said in order to make a report to the FTC I needed to tell him all of the numbers. I told him I was not going to do that even though he insisted I had to for the ‘report.’ Then he said he would transfer me to the FTC and gave me a number in case we were disconnected. A different guy answered, gave me his name and said he was Andrew Ferguson, head of the FTC.
“I’ve been in politics and business for over 50 years. I looked him up while still on the phone and realized the head of the FTC wouldn’t be answering a support line. When I refused to give him my information, he yelled that my IP was being used on porn sites and didn’t want to stop it. I hung up.
“I have great virus software on all my devices and use two-step authentication for almost everything – but I still almost fell for it. I’m sharing this story to help others.”
Pamela was fortunate. Her security measures and quick thinking saved her, but these tactics are becoming more common and more aggressive. Here’s what you can do to stay safe.
Beware of pop-up scams that impersonate Microsoft or the FTC
Scammers often use alarming pop-up messages or automated voices claiming your device is compromised, urging you to call a number for help. As described in Pamela’s experience, a pop-up claimed her computer was locked and played a voice message directing her to call what appeared to be a Microsoft support number. The scammer then impersonated both a Microsoft employee and a government official, using fake names and employee numbers, and tried to pressure her into revealing sensitive information.
If you ever receive a pop-up or voice message claiming your device is at risk, do not call the number provided or share any personal information. Instead, contact the organization directly using official contact details from their website. Legitimate companies and government agencies will never ask you to provide sensitive information or credit card numbers over the phone in response to unsolicited pop-ups or calls.
Protect your online accounts with strong, unique passwords
Make sure each of your online accounts has a unique password. This prevents scammers from accessing multiple accounts if one gets compromised. While password generators provide secure passwords, you can also easily create one that’s hard to crack by looking at three random things in the room and using them to form a password. Consider using a password manager for strong, unique passwords. A password manager helps you generate and securely store complex, unique passwords for each of your accounts. This prevents you from reusing passwords and makes it much harder for scammers to access multiple accounts if one is compromised. Get more details about my best expert-reviewed password managers of 2025 here.
A person using their keyboard (Kurt “CyberGuy” Knutsson)
GOOGLE’S AI UNLEASHES POWERFUL SCAM-BUSTING FEATURES FOR ANDROID
Don’t fall for urgency: How scammers pressure you to act fast
Scammers will create a false sense of urgency to make you act quickly without thinking. Take your time to verify any urgent requests, especially those involving money or personal information. Don’t act on impulse.
Check URLs carefully before you click them, and use strong antivirus software
Verify links before clicking them, especially if they come from someone who randomly contacted you on the internet. Scammers often use URLs that look similar to legitimate sites, but they typically contain slight misspellings or different domains (e.g., payepal.com or Microsoft.xyz). Also, install and update strong antivirus software.
Protect all your devices, including computers, tablets, and smartphones, with strong antivirus software. The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.
(Kurt “CyberGuy” Knutsson)
DON’T CLICK THAT LINK! HOW TO SPOT AND PREVENT PHISHING ATTACKS IN YOUR INBOX
Always update the software you use
Be sure each operating system, browser, and security software you use is updated on your computers and mobile devices. These updates often include patches that fix security vulnerabilities that scammers might exploit.
Be cautious with personal information on social media
Think twice before sharing personal details, such as your birthday, address, or even your pet’s name. Scammers can use information from your social media profiles to guess passwords or craft personalized phishing attacks.
A hacker at work (Kurt “CyberGuy” Knutsson)
HOW HACKERS ARE BREAKING INTO APPLE DEVICES THROUGH AIRPLAY
Enable multifactor authentication (MFA) on all accounts
Don’t limit MFA to just your main accounts. Enable it wherever possible, including email, social media, and financial services. Multifactor authentication adds an extra step to the login process, making it significantly harder for scammers to gain access, even if they have your password.
Use a personal data removal service to clean up your online footprint
Scammers often scour the internet for your personal information. Using a personal data removal service can help reduce the amount of your sensitive data available online, making it harder for scammers to target you with convincing attacks. While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap and neither is your privacy.
These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you. Check out my top picks for data removal services here.
Get a free scan to find out if your personal information is already out on the web.
A man looking at his Facebook account on his laptop and cellphone (Kurt “CyberGuy” Knutsson)
Regularly review your financial statements and credit reports
Monitor your bank accounts, credit cards, and credit reports for any unusual or unauthorized activity. Early detection is key. If you spot something suspicious, report it immediately to your financial institution and the proper authorities.
Back up your important data regularly
Ransomware and other attacks can lock you out of your files. Regularly back up your important data to an external hard drive or a secure cloud service. This ensures you can recover your information if your device is compromised.
Report online scams to these official authorities
If you encounter a scam, reporting it to the proper authorities can help you recover lost funds and prevent others from falling victim to the same scam. By reporting scams, you contribute to a database that allows law enforcement to track patterns and catch criminals. Places you can report to include the FTC, your local FBI office, the IC3 and your state’s consumer protection office.
Kurt’s key takeaways
Keep in mind that scammers are constantly evolving their tactics. You must always be on guard. Do not rely too heavily on technology to protect you, since there is a psychological aspect to their methods as well. Have a skeptical mindset and trust your instincts. By sharing experiences and staying informed, we strengthen our community’s defense against cybercrime.
What was your scariest encounter with an online scam, and how did you manage to avoid falling for it? Let us know by writing to us at Cyberguy.com/Contact.
For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.
Ask Kurt a question or let us know what stories you’d like us to cover.
Follow Kurt on his social channels:
Answers to the most-asked CyberGuy questions:
New from Kurt:
Copyright 2025 CyberGuy.com. All rights reserved.
SpaceX and Cursor are now working closely together to create the world’s best coding and knowledge work AI.
The combination of Cursor’s leading product and distribution to expert software engineers with SpaceX’s million H100 equivalent Colossus training supercomputer will allow us to build the world’s most useful models.
Cursor has also given SpaceX the right to acquire Cursor later this year for $60 billion or pay $10 billion for our work together.
NEWYou can now listen to Fox News articles!
If you’ve ever clicked “Check for updates” and trusted what you saw, you’re not alone. That’s exactly what this latest scam is counting on.
The page mimics official branding, includes a believable knowledge base number and presents a big blue download button that feels familiar.
The catch? The download installs malware designed to steal passwords, payment details and account access.
According to researchers at Malwarebytes Labs, a cybersecurity research and threat intelligence team inside Malwarebytes, the site uses a typosquatted domain that looks close enough to a real Microsoft URL to fool a quick glance. That small trick is often all it takes.
APPLE APP PASSWORD SCAM EMAIL WARNING
Cybersecurity researchers warn a fake Microsoft update site uses a look-alike URL and a familiar download button to deliver data-stealing malware. (Michael Nagle/Bloomberg via Getty Images)
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Why this fake Windows update malware slips past detection
At first glance, nothing seems off. The file looks like a standard Windows installer. It even lists “Microsoft” in its properties. That’s where this attack gets clever. Instead of using obvious malicious code, the attackers built the installer with legitimate tools and layered the attack in stages. Each piece looks harmless on its own.
Here’s what’s happening behind the scenes:
- The installer launches what appears to be a normal app
- That app quietly runs hidden scripts
- A disguised process loads a full Python environment
- Data theft tools activate in the background
Because each step looks routine, many security tools fail to flag it right away. Researchers also noted that antivirus engines initially showed zero detections for key parts of the attack. That does not mean the file is safe. It means the malicious behavior is well hidden.
What this fake Windows update malware is stealing
Once installed, the malware gets to work fast. It collects details about the infected device, including location and IP address. Then it reaches out to remote servers to receive instructions and upload stolen data.
The targets include:
- Saved browser passwords
- Login sessions and cookies
- Payment details
- Discord account tokens
It even tries to shut down other processes on your system to avoid interference while it works. In some cases, it modifies apps like Discord to intercept account activity in real time.
How the fake Windows update malware stays on your system
This malware is designed to stick around. It creates entries that look like normal system processes, so they blend in. One registry entry mimics Windows Security Health, which most users would ignore. It also drops a shortcut in your startup folder with a familiar name like Spotify. That makes it easy to overlook. Two different persistence tricks mean it can survive a reboot and keep running.
FAKE WINDOWS UPDATE PUSHES MALWARE IN NEW CLICKFIX ATTACK
A fake Windows update page is tricking users into downloading malware that steals passwords, payment details and account access. (Beata Zawrzel/NurPhoto)
Why this fake Windows update scam feels so real
There’s a bigger trend behind this. Researchers say campaigns like this often target regions where large data breaches have already exposed personal information. When attackers already know your name, provider or habits, they can build scams that feel tailored to you. That makes a fake Windows update page far more believable than a generic phishing email.
It also highlights something important. Today’s malware often hides inside legitimate tools and trusted frameworks. That makes it harder to detect and easier to trust. This campaign shows how far scammers have come. They are no longer relying on sloppy emails or obvious fake links. Instead, they are building layered attacks that look and behave like trusted software.
Even experienced users can get caught off guard when everything appears normal. The biggest takeaway is simple. A clean scan result or a familiar interface does not guarantee safety.
Microsoft says it’s aware of the threat
Microsoft confirmed it is tracking this type of activity and urges users to be cautious when downloading updates from unfamiliar sources.
“We are aware of reports of fraudulent websites impersonating Microsoft, and we actively work to detect and disrupt malicious activity across the internet,” A Microsoft spokesperson told CyberGuy. “We encourage customers to be cautious of unexpected prompts or downloads and to verify that they are interacting with legitimate Microsoft domains. As a best practice, we recommend users verify the legitimacy of a link by going directly to our website from your own saved favorite, from a web search, or by typing the domain name yourself.”
For more guidance on how to protect against online phishing scams, you can refer to Microsoft’s official support page at support.microsoft.com.
MICROSOFT CROSSES PRIVACY LINE FEW EXPECTED
A convincing Windows update scam is spreading malware that can grab saved passwords, cookies, payment data and Discord tokens. (Todor Tsvetkov/Getty Images)
Ways to stay safe from fake Windows update malware
You don’t need to be a security expert to avoid this. A few habits make a big difference.
1) Only update Windows from your settings
Go to Settings > Windows Update and check for updates there. Avoid downloading updates from websites.
2) Double-check the URL
Real Microsoft pages use microsoft.com. Anything else, even if it looks close, should raise a red flag.
3) Be cautious with urgent update prompts
If a site or message pressures you to install an update, stop and verify it manually.
4) Use strong antivirus software with behavior detection
Traditional antivirus software, which often comes built into your device or as basic security software, mainly looks for known threats using signature matching, which means it can miss new or well-hidden attacks like this one. Strong antivirus software uses behavior detection to monitor what programs are doing in real time, helping flag suspicious activity even if the malware hasn’t been seen before. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com.
5) Use a data removal service to limit your exposure
If your personal information is already circulating online from past breaches, it can make scams like this more convincing. A data removal service helps reduce how much of your information is publicly available, making it harder for attackers to target you with tailored phishing attempts. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com
6) Turn on two-factor authentication
Two-factor authentication (2FA) adds a second layer of protection if your passwords are stolen.
7) Avoid downloading installer files from unknown sites
Legitimate updates rarely require manual downloads.
Kurt’s key takeaways
Fake updates are one of the most effective tricks because they tap into something we all trust. Keeping your system secure should not put you at risk, yet that’s exactly what attackers are exploiting here. The safest move is to slow down, verify where updates come from and stick to built-in tools whenever possible.
Are tech companies doing enough to keep fake updates from putting your data at risk? Let us know your thoughts in the comments below. Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
We get a lot of questions about how The Verge works. And how The Vergecast works. And how we make money. And whether some of that money helps Nilay buy more jackets, several yachts, or something else entirely. So, every once in a while, we spend an episode of the podcast answering as many questions as we can.
On this episode of The Vergecast, Nilay and David are joined by The Verge’s publisher, Helen Havlak, to talk about ads, subscriptions, our website, our audience, and more. Then, Nilay and David answer some more questions about how we think about journalism, our relationship with Verge alumni, video podcasts, and (of course) Brendan Carr.
Thanks to everyone who sent us questions for this episode, and please keep them coming! You can always call the Vergecast Hotline (866-VERGE11) or send us an email (vergecast@theverge.com) with your questions, thoughts, feelings, and misgivings about everything we’re up to. We truly love hearing from you. And if you want to be part of everything we’re up to, and help make The Verge even bigger and better, the best thing you can do is subscribe! You even get all our podcasts ad-free.
Oh, and also, in case you missed it yesterday, be sure and check out our emergency pod on the news that Tim Cook is stepping down as Apple CEO. We’ll be talking more about the future of Apple on Friday’s show, too, so send questions if you have ’em!
-
New York1 hour agoTrump’s Immigration Crackdown Pervades Long Island Suburbs
-
Detroit, MI2 hours agoChris Simms projects Detroit Lions first-round NFL draft pick
-
San Francisco, CA2 hours agoSan Francisco sets $3.4B price tag for public takeover of PG&E
-
Dallas, TX2 hours agoGame Day Guide: Stars at Wild | Dallas Stars
-
Miami, FL2 hours agoMay a steadying presence as Cards hold off Marlins in Miami
-
Boston, MA2 hours agoTyrese Maxey, VJ Edgecombe flex in Boston: Takeaways from Celtics-76ers Game 2
-
Denver, CO2 hours agoMotorcyclist seriously injured in Denver hit-and-run crash – AOL
-
Seattle, WA2 hours agoBrock: 2 drafts fits at edge rusher for Seattle Seahawks