When “help” becomes the threat: protecting seniors from the new wave of tech support scams

A new cybersecurity threat is emerging — one that is as clever as it is dangerous, and unfortunately, highly effective against everyday users.

It begins with chaos. Imagine opening your email and suddenly being flooded with thousands of messages — subscriptions, confirmations, junk notifications — arriving faster than you can read them. This tactic, known as email bombing, is designed to overwhelm and confuse the victim.

Then, just as frustration sets in, help arrives. A message pops up. Perhaps a phone call. Maybe even a chat through a legitimate platform like Microsoft Teams. The person claims to be from IT support — calm, professional, and ready to fix the problem.

But they are the problem.

According to cybersecurity researchers, attackers are now combining spam attacks with impersonation tactics, convincing victims to grant remote access to their computers. In one case, a victim installed a legitimate Microsoft tool that unknowingly gave full control of their device to the attacker. This is not traditional hacking. This is human manipulation at scale — and seniors are among the most vulnerable.

Why seniors are being targeted

This tactic works because it exploits three very human instincts:

• Stress – The sudden flood of emails creates urgency and confusion
• Trust in authority – A “help desk” voice feels legitimate
• Desire to fix the problem quickly – Especially when technology feels overwhelming

Cybercriminals understand that many seniors did not grow up in a digital-first world. When something goes wrong, the natural response is to accept help — especially when it appears to come from a trusted source.

The dangerous pattern

1. You get overwhelmed (email flood or pop-ups)
2. “Support” contacts you
3. They ask you to install or click something
4. You give access
5. They take control — stealing data, passwords, or money

This is part of a growing trend where victims are tricked into helping the attacker themselves — sometimes called “scam-yourself” attacks.

Practical solutions for seniors

1. The Golden Rule: “We don’t call you — you call us”

If someone contacts you first claiming to be tech support — hang up or ignore it. Real companies do not randomly call you to fix problems. Real IT support is requested — you initiate it. This single rule stops most attacks.

2. Never let anyone “remote in” uninvited

Attackers rely on tools like Quick Assist or AnyDesk to take control. Never install software because someone told you to, and never allow screen sharing unless YOU called a trusted provider. This is the moment where scams become full takeovers.

3. Use a simple verification phrase

Set up a family or IT passphrase — something like “Megabite Blue.” If someone claims to be a supporter, ask: “What’s my verification phrase?” If they don’t know it, it’s a scam. Scammers rely on speed, not verification.

4. Reduce the noise

Email bombing works because inboxes are unmanageable. Use spam filters, unsubscribe from junk, and switch to a simplified email view. Less noise = less confusion = fewer mistakes.

5. Learn one simple response script

You don’t need technical training — you need one sentence: “I don’t give access to my computer. I will call my IT company.” Then hang up. Confidence beats complexity.

6. The second person rule

Before clicking, downloading, or paying anything, call a family member or IT provider first. This slows down urgency — which is exactly what scammers hate.

The bigger picture

Cybersecurity is no longer just about software — it’s about behavior. These attacks succeed not because systems are weak, but because they are designed around human psychology. Attackers create a problem, then offer the solution. That is what makes this new wave so dangerous.

In the past, we were taught to beware of strangers offering help. In today’s digital world, that advice still holds true — only now, the stranger may sound professional, appear on your screen, and know exactly what to say.

The safest response is often the simplest: Slow down. Verify. Call someone you trust.