Microsoft outage: UK warns of fake IT support calls

The United Kingdom’s National Cyber Security Centre has warned the public to be vigilant against scam calls and approaches from fraudsters impersonating IT help desks or Microsoft following the global Microsoft outage.

The NCSC issued the warning in an photo statement shared on its X account on Friday, cautioning that scammers often exploit major news events to gain people’s trust and pressure them into acting without thinking.

“We recommend vigilance against scam calls and approaches impersonating IT help desks or Microsoft,” the agency said.

It added that scammers often exploit current news stories to make their approaches appear credible, gain victims’ trust quickly and pressure them into taking actions without thinking.

The warning came as the agency urged members of the public to exercise caution when responding to unexpected calls and messages, particularly those containing links.

The NCSC also directed users to its website for guidance on recognising and reporting suspicious messages, websites and telephone calls.

How to spot scam emails, text messages and calls

Cybercriminals can contact potential victims through emails, text messages, telephone calls and social media platforms. They often impersonate individuals or organisations their targets trust, including banks, government agencies, businesses and technical support providers.

Although scams were once easier to identify through spelling mistakes, unusual email addresses and poorly designed websites, fraudsters are increasingly using convincing language and professional-looking communications to deceive people.

Scammers may also include QR codes in phishing emails to direct recipients to fraudulent websites. Users are advised to be cautious about scanning QR codes received through unsolicited emails.

The NCSC identifies several warning signs that could indicate an attempt to defraud someone.

1. Authority

Scammers may claim to represent an important person or official organisation, such as a bank, doctor, solicitor or government department.

They use familiar names, official-looking logos and professional language to convince recipients that their requests are legitimate.

In the wake of the Microsoft outage, fraudsters may also impersonate IT help desks or Microsoft support personnel.

2. Urgency

Suspicious messages may demand an immediate response or give recipients a limited time to act.

Scammers often use phrases such as ‘within 24 hours’ or ‘immediately’ and may threaten fines, account suspension or other consequences if their demands are not met.

Such pressure is intended to prevent victims from taking time to verify the information.

3. Emotion

Fraudsters may use threatening language or make promises designed to trigger fear, panic, excitement, hope or curiosity.

They exploit these emotions to influence people’s decisions and persuade them to click links, disclose personal information or make payments.

4. Scarcity

Scammers may advertise products, financial rewards, concert tickets or other opportunities supposedly available for a limited period or to only a few people.

By creating a fear of missing out, they encourage recipients to act quickly without checking whether the offers are genuine.

5. Current events

Fraudsters frequently exploit major news stories, public announcements and specific periods of the year to make their messages appear relevant.

The NCSC’s warning following the Microsoft outage highlights how criminals may use a widely reported disruption to make fraudulent approaches involving technical support appear credible.

How to check if a message or call is genuine

The NCSC advises people who are uncertain about a message to contact the organisation supposedly responsible for sending it.

However, they should not use telephone numbers, email addresses or links contained in the suspicious communication. Instead, they should obtain contact details from the organisation’s official website.

The agency also advises people to remember that banks and other official organisations will not ask them to supply personal information through email or call to request confirmation of bank account details.

Anyone who suspects that a caller is impersonating an official representative should end the call and contact the organisation directly using verified contact details.

Official contact information may also be available on paper statements, credit cards and other documents issued by the organisation.

How to report suspicious communications

People who receive suspicious messages or calls, or visit potentially fraudulent websites, are encouraged to report them through the appropriate channels.

The NCSC provides guidance on reporting:

Scam emails.

Fraudulent text messages.

Suspicious websites.

Scam telephone calls.

Fraudulent advertisements.

Reporting suspicious communications can help relevant authorities and service providers identify fraudulent activity and take appropriate action.

How to make yourself a harder target

Criminals sometimes use personal information available online, including details published on social media, to make phishing messages more convincing.

Information about people’s workplaces, families, interests and activities can help fraudsters construct messages that appear genuine or specifically targeted at their victims.

The NCSC advises people to be mindful of the personal information they and others publish about them online and to review the privacy settings on their social media accounts.

Users should also exercise caution when responding to unexpected communications, particularly those requesting personal information or encouraging them to click links.

The agency’s guidance forms part of its wider advice on recognising and reporting suspicious messages, websites and calls.