How do fake tech support scammers find victims?

They monitor social media for customer complaints, then respond from lookalike accounts. They also run fake support ads and embed fake chat widgets on phishing sites.

Will Amazon or my bank ever ask for my password?

No. Amazon, Apple, Microsoft, and banks never ask for your password. Their agents cannot use it and their systems don't require it for support interactions.

Scam #5 · Critical Threat

That Wasn't Amazon Customer Service.

They had your order number. They sounded professional. They were 'ready to help.' The only problem is they don't work there.

What You Just Experienced

You saw what looked like an Amazon support chat — complete with a real-looking order for a MacBook Pro, a delivery issue, and a helpful agent named Rajesh ready to fix it. The "fix" required your Amazon email, password, and payment card. A real Amazon agent would never ask for any of that.

But in the moment? When you're worried about a $2,400 laptop going to the wrong address? You're not thinking about what Amazon does and doesn't ask for. You're thinking about your laptop.

How They Find You

Here's what's changed about tech support scams. The old version was a cold call from "Microsoft." Easy to spot, easy to hang up on. The new version is smarter.

You tweet at Amazon complaining about a late delivery. Within minutes, a reply from "@AmazonCareTeam" asks you to DM them. The profile picture is right. The name sounds right. But the account was created last week and has 12 followers. You just handed your order details to a stranger.

They also plant fake support chat widgets on phishing sites. Google "Amazon customer support" and a top result might be an ad leading to a fake page with a live chat staffed by scammers. It happens more often than Amazon would like you to know.

The Tells

They contacted you first. If you didn't initiate the support conversation through the official app or website, be skeptical of everything that follows.
They asked for your password. Amazon, Apple, Microsoft, your bank — none of them need your password and none of their agents can use it. It's the brightest red flag there is.
Remote access requests. "Let me remote into your computer to fix this" is the sentence that should end the conversation. Immediately.
Social media support from unverified accounts. Check the handle. Check the follower count. Check when the account was created. @AmazonHelp is real. @Amazon_Help_Desk is not.

The Callback Rule

If someone contacts you claiming to be from a company — by phone, text, chat, social media, anything — don't continue that conversation. Go to the company's real website or app yourself and contact support from there. Use the phone number on the back of your card, not the one they gave you.

How to Talk About This

Make the rule stick. "Nobody from Amazon, Apple, or your bank will ever call or message you asking for your password. It will never happen. If someone does, the conversation is over — hang up, close the chat, block the account."

The social media angle. "If you complain about a company online, scammers watch for that. Any 'support' account that DMs you first should be treated as suspicious until verified. Go to the company's official page and check if that account is linked there."

← Replay This Simulation All Scams