Scammer script (made by me)
Scammer: thank you for calling technical support, my name is John, how may I help you
Victim: (mentions PC problem)
Scammer: ma'am how old is this computer
Victim: (mentions how many years)
Scammer: so what do you see on your screen
Victim: (mentions pop up or virus)
Scammer: ma'am this means your PC has alerted us that you have a malicious virus on your machine
Victim: (anything here)
Scammer: so look down on the bottom left of your keyboard, what do you see to the right of the ctrl key
Victim: (mentions something along the lines of four flags key or Windows logo)
Scammer: so hold down the windows key (or four flags) key and the letter R
Victim: *presses key and R*
Scammer: what do you see on your screen
Victim: (mentions a run box)
Scammer: Ok so type in there www.support.me
Victim: it says for me to enter a 6 digit code
Scammer: yes ma'am your code is (code here)
Victim: (downloads and opens and proceeds from there)
Scammer: Ok ma'am do you see your mouse moving
Victim: (says yes and possibly asks if that's you, say yes if so)
Scammer: (open run and type in eventvwr, then go to custom views and click administrative events) so do you see these errors and warnings?
Victim: (says yes)
Scammer: these are the errors caused by this malicious virus, and if this isn't removed all your data will be compromised, and you will lose this computer
Victim: (anything)
Scammer: so just give me a moment here (type in taskmgr, go to services click on status until they are ordered in stopped) you see these here? These services help your computer run and they have been stopped by the virus on your computer.
Victim: (anything)
Scammer: so just give me a moment here to run a quick virus scan (type cmd.exe in run and type in tree in cmd, at the end, scroll up and type in (network compromised, malicious viruses found) you see these detections here.
Victim: (yes)
Scammer: (run netstat next, mention the ip addresses and mention they are from hackers)
Victim: (anything)
Scammer: So just give me a moment (go to run and type in syskey, click update and type in the startup password on there (can be anything like John or 1234) and then click ok, after that, open notepad)
(General banking and card details)
199.99 one year
299.99 two years
399.99 three years
599.99 lifetime
(Any plan victim purchases will be good)
Scammer: ma'am thank you and we will start the work, so step away from the PC and don't touch it. (Delete all anti viruses on the PC and install a random rogue one from the internet, clear system restore, then tell the owner that the PC is all cleaned up and thank the owner and hang up)








Outbound version



Victim: *picks up phone* hello
Scammer: Hello, this is John, and I am calling you from Microsoft technical support. how are you?
Victim: (anything)
Scammer: (surname), we have been receiving warning and error messages from your computer, are you aware of this?
Victim: no
Scammer: I can show you the errors and warnings and help fix the problems, so are you in front of your computer?
Victim: (if yes continue with the script, if no tell them to get in front of their computer, then continue)
Scammer: (continue from previous script at "look at the bottom left")