A family of System Center products for managing incidents and problems.
Yes. This matches a tech support scam.
Immediate actions:
- Disconnect the laptop from the internet to stop any further remote access.
- Uninstall any applications that the scammer asked to install.
- Since remote access was given, consider resetting the device. This is time-consuming, but may be the best option if settings were changed or suspicious behavior continues. Recovery actions can be found in Windows recovery options.
- Run a full scan with Windows Security to check for malware.
- Apply all Windows security updates: Start > Settings > Update & Security > Windows Update.
- Change passwords immediately on affected accounts, especially email, banking, shopping, and any account that reused the same password. Use unique passwords.
- Turn on multifactor authentication for every account that supports it.
- Because verification codes from creditors were shared, contact the affected banks, credit card companies, and creditors immediately and tell them fraud may have occurred.
- If a debit card number was shared, call the card provider to contest charges and ask them to cancel and replace the card.
- Document everything while it is still fresh: what was shared, what accounts were involved, what apps were installed, and when it happened.
- If identity theft or financial fraud is suspected, report it to local law enforcement. If in the U.S., place a fraud alert on credit reports and report identity theft to the FTC.
- Report the scam to Microsoft using the Microsoft scam reporting page.
Important signs this was a scam:
- Microsoft does not make unsolicited phone calls or browser pop-ups telling people to call a support number.
- Phishing and scam messages often create urgency, pressure, and ask for sensitive information, links, attachments, verification codes, or payment details.
Do not continue communicating with them, and do not provide any more codes, passwords, or payment information.