One of the oldest tricks still works: someone calls, emails or texts claiming to be from your IT provider, Microsoft or your bank. There is a problem with your computer or account, and they need you to install something or confirm your password so they can fix it.
It works because it sounds helpful, it sounds urgent, and most people want to be cooperative.
Two rules that stop almost all of it
1. Real IT support does not call you out of the blue to ask for remote access. TenacIT never makes unsolicited calls or sends unsolicited messages asking you to install software or give us remote access. A remote session happens only on a request you opened, and it starts only with your permission.
2. Nobody legitimate asks for your password by email or text. TenacIT will never ask you to send a password by email or text message. Neither will Microsoft or your bank.
Other warning signs
- Pressure and urgency. “Your account will be locked in 30 minutes.” Real problems can wait the five minutes it takes to call back.
- A caller who knows a little about you. Names, your company and your job title are easy to find online. It proves nothing.
- A link to “verify” your account. Look at where the link actually goes before you click. Better still, don’t click; go to the site yourself.
- An MFA prompt you didn’t trigger. If your phone asks you to approve a sign-in you didn’t start, deny it. Someone has your password.
- Requests for gift cards or unusual payments. Always a scam.
What to do
- Hang up, and call back using a number you already know, not one the caller gives you. For TenacIT clients, that is 1-878-787-7678 or support@tenacit.com.
- Don’t install anything you were not expecting.
- If you already clicked, entered a password or let someone connect, tell your IT provider straight away. Disconnect from the internet if someone is still connected. It is far easier to contain a problem in the first hour than the next day, and nobody will be angry with you for reporting it.
Want your team to recognise this before it happens? We run security awareness training for client staff. Talk to us or see our knowledge center.