Scammer or HP Tech

[tboythecat]

I need to know if I should pay the tech that fixed my printer?  The first guy said it was corrupted with virus from Russia.  They fixed my printer which is under warranty but should I pay them the $200.00??  How do I know if they are legit or not.  

[Repairatrooper]

If they are trying to tell you that the printer had a virus, that is highly unlikely. You may have had a computer virus but it is likely that these were not actual HP employees.

[NonSequitur777]

@tboythecat,

Welcome to our HP Community forum!

Let me be blunter than @Repairatrooper: No, absolutely do not pay them.

This is almost certainly a well-known tech support scam, and you are likely dealing with criminals rather than legit technicians.

Printers do not get "corrupted with viruses from Russia".

Balderdash.

Scammers use frightening, highly exaggerated language like this to induce panic so that you will hand over your credit card information without thinking.

Here is how you can verify this situation immediately and protect your money.

1. Why You Should Not Pay:

• The "Russian Virus" Lie: Modern consumer printers do not get infected with viruses that require a technician to manually remove for $200. Are you kidding me? -If a printer has a software glitch, it is fixed by running a free factory reset or updating the free driver from HP's official website.
• Warranty Rules: If your printer is actually under warranty and you went through official HP Support, HP does not charge for warranty repairs. HP will never ask you to pay a random fee via a third-party link, gift cards, or a generic invoice to fix a consumer device.

2. How to Spot a Legit Tech vs. a Scammer:

Ask yourself how you found this technician:

• The Scam Method: Did you search Google for "HP Printer Support phone number" and call a number from an ad? Did a pop-up window suddenly appear on your computer screen telling you your printer was broken and providing a number to call? Did they use software like AnyDesk, TeamViewer, or Zoho to take control of your computer screen? If yes, it is a doggone scam.
• The Legit Method: The only legitimate way to get official HP support is by going directly to ://hp.com and using their official automated virtual assistant or authorized repair channels. HP never uses third-party random billing companies.

3. Immediate Actions You Must Take Right Now:

If you gave them your credit card info or let them onto your computer, take these steps immediately:

1. Call Your Bank: Contact your credit card company or bank right now. Tell them you were targeted by a "Tech Support Scam" and need to dispute the $200 charge and block any future transactions from that company.
2. Disconnect and Scan Your PC: If they remotely controlled your computer, they may have installed malicious software to spy on your passwords or bank accounts. Unplug your internet, go to your Windows settings, and run a full scan using Windows Defender (or a trusted program like the free Malwarebytes). Look through your installed apps and delete any remote access tools they made you download.
3. Change Your Passwords: If you logged into your bank, email, or Amazon account while they were looking at your screen, change those passwords immediately using a different device (like your phone).

Do not answer any follow-up phone calls or messages from these (...) individuals. They may try to threaten you by saying they will "break your printer" or "sue you" if you don't pay. These are empty threats to scare you.

This is very important: Did you give them your credit card details, or did they get you to download a remote control program onto your computer?

Kind Regards,

NonSequitur777

[tboythecat]

I replied but I think from the wrong area.  

Thanks for your response.
I have a Mac Air, so how do I know if they put something on my computer?
I believe they said my computer was infected with this Russian hacker and that is why the printer wasn't working.
It now works but they keep calling me.  I have not paid them yet.
Not sure how I got a hold of them, possibly I strayed from the HP site.  My guess is they are scammers mainly because of the Russian hacker thing but also because he kept losing his temper.  
Appreciate your help!

[NonSequitur777 · Accepted solution]

@tboythecat,

OK, it is a huge relief to hear that you have not paid them yet and that your instincts kicked in! You are 100% correct: losing their temper is a massive, definitive red flag of a scammer who realizes their targets are slipping away.

Since you are using a MacBook Air, the cleanup steps and signs of compromise are a bit different than a Windows PC. Here is exactly how to verify if they put something on your Mac and how to secure it right now.

1. How to Check for Remote Control Software (The Main Threat):

Scammers almost always make Mac users download remote desktop apps. You need to check if these are still running or installed.

• Check the Menu Bar: Look at the very top right of your Mac screen (near the clock and Wi-Fi icon). Look for unfamiliar icons, especially a blue/white diamond (TeamViewer), a red square with two white shapes (AnyDesk), or a stylized "Z" (Zoho Assist). If you see them, click them and select "Quit" or "Close."
• Check Your Applications Folder: Open Finder, click on Applications in the left sidebar, and scroll through the list. Look for:
  • TeamViewer
  • AnyDesk
  • LogMeIn / GoToAssist
  • Zoho Assist
  • Supremo
• How to Remove Them: If you see any of these apps that you did not personally install before this incident, drag them directly to the Trash, then empty the Trash.

2. Check for Persistent Background Access:

Modern macOS has a security feature that alerts you when apps try to run in the background.

1. Click the Apple menu () in the top-left corner and open System Settings.
2. Go to General > Login Items & Extensions.
3. Look under the "Open at Login" and "Allow in the Background" sections.
4. If you see the name of any remote desktop software (like AnyDesk or TeamViewer) or any strange company name you don't recognize, flip the toggle switch to Off.

3. Scan Your Mac for Malware:

Whilst Macs are highly secure, scammers occasionally trick users into installing malicious browser extensions or configuration profiles.

• Run a Scan: Download the official, free version of Malwarebytes for Mac directly from their official site (malwarebytes.com).
• Delete Threats: Run a scan (it takes less than two minutes) to ensure no adware or malicious files were left behind. You can safely uninstall Malwarebytes afterward if you don't want to keep it.

4. Dealing with the Aggressive Phone Calls:

They keep calling because they spent time "working" on your machine and are furious they haven't gotten their $200 payload.

• Block and Ignore: Do not answer, do not argue, and do not try to tell them "I know you are scammers." Every time you speak to them, it signals that your phone line is active, and they will keep trying. Block every number they call from.
• They Cannot Ruin Your Mac: They may threaten to "lock your computer" or "delete your files" if you don't answer. They cannot do this if you have closed and deleted their remote software. They are completely locked out.

Why Your Printer Suddenly Works:

You mentioned the printer works now. Scammers often do one of two things: they either unpause a print queue that was stuck (a 5-second free fix), or they actually install the correct, free HP driver just to prove "value" before demanding the $200. You can safely keep using your printer; they cannot control it remotely.

To help me fully secure your Mac, did you type your passwords or log into your online banking while they were connected to your screen?

Kind Regards,

NonSequitur777

[tboythecat]

Thank you!  I looked in all the places and didn't find anything suspicious and also ran the malware scan and all was fine.  Still feeling uneasy, but I will put it to rest for now.
Thank you for your help!

[tboythecat]

Forgot to say, yes I typed my log in password (changed that now) and no I did not log into a bank account.
Thanks again!

[NonSequitur777]

@tboythecat,

Outstanding -return to our Community whenever you need to!

Warm Regards,

NonSequitur777