The Pop-Up Lie That Emptied a Retirement Account — and the One Rule That Stops It
A woman in her 80s sat down to read her sister's obituary online. A window took over her screen. A loud voice told her not to turn off her computer. Then a man came on the line and said something that froze her in place:
"There are 36 hackers in your computer right now."
There were no hackers. There was one man, sitting in a call center, reading from a script. By the time a bank investigator finally reached her, she had handed over most of her retirement savings in cash, gift cards, wire transfers, and cashier's checks. Her story was shared with AARP by her son, a retired U.S. intelligence official, who watched it happen to his own mother.
Nothing was ever wrong with her computer. The whole event was a performance, staged to do one thing: make a calm person panic so they stop thinking and start obeying. Once you see how the trick is built, it loses almost all of its power. And a single rule defeats every version of it.
Why the scammers come for us first
If you're over 60, this isn't paranoia. The Federal Trade Commission told Congress in 2024 that people 60 and older were five times more likely to report losing money to a tech support scam than people aged 18 to 59. The FBI's 2024 crime report put tech support fraud among the costliest categories of the year, with losses in the billions, and older adults absorbing far more than their share.
Gullibility has nothing to do with it. The problem runs the other way: we grew up trusting that a company calling about a problem was a company trying to help. Scammers know that instinct is honest, and they aim straight at it.
How the trick actually works
The scam has a few entry points, but it always follows the same shape: a scare, a "helper," and a handoff of your money.
It starts with a warning you didn't ask for. Often it's a pop-up, sometimes triggered by a bad ad on an ordinary website, claiming your machine is infected. Today's versions are nastier than they used to be. Michal Salat, a threat-intelligence director at the security firm Avast, has described how scammers throw the browser into full-screen mode and hide the button to close it. You can't make the warning go away, so the panic feels real, and the only "exit" on the screen is the phone number they want you to call.
It doesn't always come as a pop-up. The same crews also send text messages, emails, and robocalls, often claiming to be Microsoft, Apple, or Norton. Some say your security subscription expired. Some make uglier claims to rattle you. Every version ends the same way: with a number they want you to call.
A friendly "technician" takes over. Once you call, the person on the line is patient and reassuring, which is exactly why it works. They ask to connect to your computer remotely to "fix" it. The moment you allow that, a stranger is inside your machine. Salat notes that scammers often quietly install a second program that keeps their access alive even after the call ends. Even when you believe the problem is solved, they can keep digging for money and passwords.
Then the money "needs to move." The most devastating version pivots away from your computer entirely. The "technician" says hackers have broken into your bank account, and that for your own safety you must move your savings to a new, "safe" account right away. There is no safe account. You are wiring your money to them.
That urgency is the whole game. As the FTC puts it, scammers push you to act fast precisely so you don't have time to think clearly or check with anyone.
The red flags, in plain terms
Any one of these is reason enough to stop and walk away:
- Contact you didn't initiate. A pop-up, call, text, or email saying something's wrong with your device. Real tech support does not reach out to you cold.
- A pop-up with a phone number. Legitimate security warnings never tell you to call a number. That number is the trap.
- A window you can't close. Full-screen mode with no visible exit is a manufactured emergency.
- A request for remote access from anyone who contacted you, rather than a company you called on your own.
- The "move your money to a safe account" line. No bank or tech company will ever ask you to do this.
- Payment by gift card, wire transfer, cryptocurrency, or cash at an ATM. A real company bills you normally. These methods exist because they're nearly impossible to trace and claw back.
A man in New Jersey, in a report logged with the Better Business Bureau, was talked into withdrawing $6,000 from savings and feeding it into a cryptocurrency machine at the direction of a fake Microsoft technician. The crypto ATM and the gift card aisle are where this money goes to disappear.
The laptop is only half the territory. As Amy Nofziger of the AARP Fraud Watch Network points out, the device you call a phone is really a computer too, and the same scams now arrive there.
If a warning has already trapped your screen
Don't call the number. If a pop-up has hijacked your browser and won't close, restart the computer. If it still won't let go, it's fine to shut the machine off completely by holding the power button or unplugging it. You may lose an unsaved document or a few open tabs. That is a tiny price next to your savings.
If you think a stranger has actually been inside your computer, don't try to scrub it yourself. Take it to a repair shop run by a person you can look in the eye, and have them check for anything that was installed. A backdoor you can't see is the reason these criminals keep coming back.
Where to report it
Reporting still matters after the money's gone. It's how investigators connect one case to hundreds of others and occasionally reach the people behind them. In 2024, those reports helped fuel joint operations that led to hundreds of arrests.
You can file with the FTC at ReportFraud.ftc.gov, and with the FBI's Internet Crime Complaint Center at ic3.gov. For one-on-one help, the AARP Fraud Watch Network Helpline is free at 877-908-3360, staffed by people who talk callers through exactly this every day. The FTC also keeps a plain-language guide on how to spot and avoid these scams.
The one rule
Everything above comes down to a single sentence you can keep in your back pocket for the rest of your life:
No real company will ever contact you first to tell you something is wrong with your device.
Not Microsoft. Not Apple. Not your bank. If a warning finds you — on your screen, your phone, in your inbox — the warning itself is the scam. Close it, set it down, and if you're worried about your computer, call a company at a number you looked up, on your own terms.
The woman reading her sister's obituary didn't lose her savings because she wasn't sharp. She lost it because no one had ever told her the rule. Now you have it. The most useful thing you can do today is hand it to someone else who hasn't heard it yet.