🚨 Tech Support Scams Are Moving Into Calendar Invites, Apple Pay Alerts and Trusted Listings

VERIFIED EMERGING SCAM ALERT

Report date: September 2, 2026

Scam type: Tech-support impersonation / trusted-platform lure / remote-access fraud

WHAT HAPPENED

Malwarebytes Labs reported on September 2 that tech-support scams are expanding beyond the familiar fake browser virus warning. Researchers say criminals are increasingly abusing sponsored search results, hijacked on-site searches, fake listings on otherwise trusted platforms, renewal notices, fake calendar invitations, Apple Pay-related notifications, and other trusted-looking channels to push consumers toward fraudulent support numbers. Once a victim calls, the scammer poses as technology or security support and may seek payment, personal information, or remote access to the device.

This is not an official government warning. AigiShield classifies it as a Verified Emerging Scam Alert because the new delivery methods were reported by an established cybersecurity research organization and the underlying tech-support fraud tactics are independently corroborated by consumer guidance from the Federal Trade Commission, Apple, and Microsoft.

HOW THE SCAM WORKS

A consumer encounters a calendar event, payment-related alert, search result, online listing, renewal notice, or other message that appears connected to a familiar company or platform. The lure claims there is an urgent security, billing, subscription, or device problem and provides a support number or link. When the consumer calls or follows the instructions, the scammer claims to represent a trusted technology company or security provider. The fraudster may then ask the victim to install remote-access or screen-sharing software, disclose passwords or verification codes, or make a payment. If remote access is granted, the scammer may be able to view files, capture sensitive information, manipulate the device, or facilitate additional fraud.

WHO IS BEING TARGETED

The tactic can target any consumer who searches for technical support or reacts to an unexpected security, billing, subscription, or payment notice. Users of major technology brands, payment services, security software, and online platforms may be especially susceptible because the scam relies on the familiarity of the brand or platform to lower suspicion.

WARNING SIGNS

• An unexpected calendar invitation or event contains a support number, urgent warning, or link.

• An Apple Pay or other payment-related notice tells you to call an unfamiliar support number about a charge or account problem.

• A sponsored search result or online listing appears to be official support, but the website address or phone number does not match the company's known official contact information.

• Someone claiming to be tech support asks you to install remote-access or screen-sharing software.

• The caller asks for a password, device passcode, one-time verification code, gift card, cryptocurrency, wire transfer, or other unusual payment.

• The supposed support representative creates urgency, tells you not to hang up, or discourages you from verifying the problem independently.

WHAT CONSUMERS SHOULD DO

Do not call a phone number contained in an unexpected calendar event, payment notice, pop-up, or suspicious search advertisement. Instead, open the company's official app or type its known website address yourself and locate support information there. Apple advises users to treat suspicious calendar invitations as junk rather than interacting with them. Never provide passwords, device passcodes, or one-time security codes to an unexpected caller. Do not grant remote access to your computer or phone unless you independently initiated support through a verified channel.

If you already gave a suspected scammer remote access, disconnect the session, remove remote-access software you did not intend to install, run a security scan, change important passwords from a trusted device, and contact your financial institution immediately if money or banking information may have been exposed. Report suspected fraud to the Federal Trade Commission at ReportFraud.ftc.gov.

WHY THIS DEVELOPMENT MATTERS

The important change is the trust context. Many consumers have learned to distrust obvious browser pop-ups claiming their computer is infected. A calendar event, payment notification, sponsored search result, or listing displayed within or alongside a familiar service can feel more credible. Scammers can exploit that familiarity to persuade the victim to make the first call, which may make the interaction seem less like an unsolicited scam. The fact that a message, listing, or event appears inside a familiar platform is not proof that the sender or support number is legitimate.

SOURCE ATTRIBUTION

Primary emerging-threat source: Malwarebytes Labs, September 2, 2026 — https://www.malwarebytes.com/blog/scams/2026/09/tech-support-scams-look-different-now-heres-what-to-watch-for

Official consumer guidance: Federal Trade Commission — https://consumer.ftc.gov/articles/how-spot-avoid-and-report-tech-support-scams

Platform guidance: Apple Support — https://support.apple.com/en-us/102568

Additional vendor guidance: Microsoft Support — https://support.microsoft.com/en-us/office/protect-yourself-from-tech-support-scams

AIGISHIELD ASSESSMENT

AigiShield classifies this as a Verified Emerging Scam Alert. The underlying tech-support scam is well established, but the expanding use of trusted-platform mechanisms such as calendar invitations, payment alerts, sponsored results, and online listings is a meaningful consumer-protection development because those channels can make the initial lure appear more credible.

Think it might be a scam? Let AigiShield check it out for you.

Think Before You Click. Verify Before You Trust.