On June 22, 2025, I came across a video uploaded by our good friend Scambaiter on an illegal call center on the 4th floor of H88, Block H, Sector 63, Noida, Uttar Pradesh 201301, India, facilitating a common Microsoft technical support scam against American residents.
How their scam worked was:
- The scammers will create fake virus popups and fraudulently promote them through malicious advertisements. The popups will include a phone number for the victims to call, which is handled through ViciDial.
- The scammers will answer these calls under false American names like “this side Tim” and falsely claim to operate from California.
- The scammers will also remotely connect to their victims’ computers using UltraViewer or a Russian fork of ConnectWise and use the command prompt to run some fake “scans.”
- Once the “scans” are complete, the scammers will falsely claim their victims’ network and pho0ne lines were compromised by hackers from Mexico, Ohio and Russia to make illegal purchases on poker.com.
-
- I presume these scammers will also use child porn as a scare tactic.
- The scammers will then try to obtain their victims’ banking information and appoint a “personal banking assistant” to help the victim “secure” the money by handing it off to a money mule who will fraudulently pose as an FDIC agent.
-
- These “closers” appear to use numbers serviced by TextNow.
The scammers have also been known to impersonate the Canadian government and the United States Social Security Administration (SSA). Their computers have since been destroyed by Scambaiter’s own take on the “You Are An Idiot” joke virus.