Scam teardown

The "phantom hacker" scam

By Lajhem Cambridge, Founder of Lorna · Published Oct 24, 2026

It starts with a pop-up, then a call from "your bank," then a letter from "the government." Each one makes the last one seem real. Here are the three signs to look for.

Has a message like this appeared on your screen?

Pop-up

"Your computer has been compromised. Do not shut it down. Call support now: (888) 555-0147"

It looks like help. It's the first of three fake helpers, and each one hands you to the next.

  1. 1

    Tech support you didn't ask for. A pop-up, text or email tells you to call a number. The person who answers asks you to download a program so they can "scan" your computer, then asks you to open your bank accounts to check them. Now they know where your money is.

  2. 2

    A call from your bank that someone promised you. "Tech support" says your bank will call you. Then a caller says a hacker is in your accounts and you need to move your money to a "safe" account. They tell you to keep the reason a secret.

  3. 3

    "The government" backs up the story. Someone says they're from the Federal Reserve or another agency. If you have doubts, an official-looking letter or email shows up. The U.S. government will never ask you to wire money to a foreign account, or to pay with cryptocurrency or gift cards.

Your calm next step

Hang up or close the pop-up. Don't call the number, download anything, or let anyone control your computer. Worried about your accounts? Call your bank yourself, using the number on the back of your card or on your statement.

Not sure?

Text Lorna before you call back or download anything. Lorna will help you check if it's real.

Already sent money? Call your bank right away, then report it to the FBI at ic3.gov.

Want to go deeper?

StopScams Listen and Learn Workshop

2:00-3:00 PM PT · SF Treasurer's Office

In person · Mission Bay Branch Library, San FranciscoStaying safe onlineGood for: Parents
Go to event
See all upcoming events

Get new guides and events by email

Once a week: the newest scam teardowns and events worth your time. Free, and you don't need to use Lorna to get it.

Who's this for?