A pop-up appears on your computer screen: “Your computer has a virus. Call this number now.” You call. And before it is over, you have bought gold bars and handed them to a stranger at your door.
I know how easy this is to fall for, because I know how that pop-up feels. It is alarming, it is urgent, and it looks official. The people who built it are counting on exactly that.
This is the gold bar scam, and it is the newest costume of the same attack this series has been tracking. In the first two articles we covered the fake bank call and the recovery call that comes after a scam. This one is different: it makes you buy the gold yourself, and then sends someone to your door to take it.
This month, New York’s attorney general and the NYPD’s financial crimes task force both warned about it - more than $100 million lost in New York City over two years. The FBI’s Boston field office has reported more than $26 million in losses across the region, most of it from people over 60.
Here is how the script runs, the tells that give it away, and the one sentence that stops it.
The Script, Step by Step
Step one: the pop-up
You are browsing the web, and suddenly a full-screen alert appears: “WARNING - Your computer has been infected.” It looks like it comes from Microsoft or your antivirus company. There is a phone number, big and bold, and a warning that your files will be locked unless you call.
The pop-up is fake. There is no virus. But you do not know that, and the people who made it are betting that the alarm will do the thinking for you.
Step two: the call
You call the number, and a friendly, professional “technician” answers. They ask you to let them connect to your computer so they can scan it. This is remote access - a feature that lets someone else control your screen. The technician clicks around, finds “problems,” and then delivers the bad news: your computer has been used in a crime. Or your accounts are compromised. Or you are being investigated.
And then the call “transfers” to a federal agent.
Step three: the agent
The next voice sounds official. Calm, patient, with a title and a case number. They tell you your bank accounts are part of an investigation - money laundering, trafficking, a “compromised network.” They tell you your money is not safe, and that the government is about to seize it, or freeze it, or that criminals are about to empty it.
This is the moment the scam turns. Everything up to now has been theater. From here, they need you to move money.
Step four: the gold
The “agent” tells you the only safe place for your money is gold. Gold cannot be frozen, they say. Gold cannot be tracked. You need to buy gold bars - usually from a legitimate gold dealer, sometimes with the scammer arranging the purchase - and keep them safe until the investigation is over.
So you go to the dealer. You spend your savings, or your retirement, on gold bars. You bring them home.
Step five: the courier
A few hours or a day later, someone knocks on your door. They say they are a courier, here to collect the gold for the “investigation.” They may show a card that looks like a badge. They may be polite, apologetic, in a hurry.
You hand over the gold. The door closes. And they are gone - the gold, your savings, and the “agent” all at once.
The Two Tells That Give It Away
That is the whole test, in two sentences. And the first sentence is the one that stops the scam cold, no matter how far along the script you are.
Real government agencies do not take payment in gold bars. Real banks do not ask you to convert your savings into metal to “protect” it. And no legitimate institution sends a courier to your home to collect valuables - that is not how any of them work, in any country.
There is a second tell, earlier in the script: real Microsoft, real antivirus companies, and real government agencies do not call you about a virus on your computer. The pop-up is not a system warning. It is an ad for a scam, and the phone number on it is the scammer’s phone number.
What to Do at Each Step
The good news is that every step has an off-ramp, and the earlier you take it, the easier it is.
If the pop-up appears: do not call the number. Close the browser tab. If it will not close, close the whole browser, or restart the computer. The pop-up is not a virus - it is a sales pitch. Nothing you do to it can hurt your computer, but everything the “technician” does afterward can.
If someone is already on the phone with you: hang up. No explanation, no politeness. The person on the other end is not Microsoft and is not the government. Hang up and call a number you trust - the number on the back of your bank card, or the published number for the company they claim to be.
If they ask for remote access: say no. No legitimate technician, bank, or agency needs to control your computer to “check” it. If you already let them in, disconnect: close the remote session, restart the computer, and call your bank if you typed in any account information.
The instant anyone tells you to buy gold: the conversation is over. That is the tell, in bright red letters. Buying gold on the instructions of a “government agent” is not a thing that happens, anywhere. When you hear it, hang up and tell someone.
If a “courier” shows up at your door: do not hand over anything. Close the door, and call the police if they will not leave. No real agency collects valuables from your home, and the person at your door is a criminal.
And the step that covers all of them: tell a family member. The scam depends on secrecy - it needs you to act alone, scared, and without checking. One phone call to a person you trust breaks the whole script. This is the same lesson from the first two articles, and it is worth repeating: every costume this series has covered falls apart the moment someone else is watching.
If It Has Already Happened
If the gold is already gone, here is what actually helps.
Report it. File a report with the FBI’s IC3 - this scam is exactly the kind of internet-facilitated fraud they track - and with the FTC at ReportFraud.ftc.gov. It will not get your gold back, and I am not going to pretend it will. But those reports are how patterns get spotted and how arrests happen, and yours is part of that.
Tell your bank. Tell them about the withdrawal you made for the gold purchase. They can put a watch on the account, and they may be able to flag the dealer transaction for review.
Tell your family. I know this is the hard one - the same shame that powers the scam. But the person who knows what happened is far less likely to be hit by the follow-up call, and there is always a follow-up call. After the gold scam, the next call offers to “recover” your gold. That is the second scam, covered in the previous article in this series.
Here is the hard truth, the same one from the last article: once the gold is in a stranger’s hands, it is almost certainly gone. It is sold within hours. Accepting that is not giving up - it is the thing that makes you immune to the recovery scam that comes next.
The One Conversation
If this is your parent or grandparent, have one short conversation - the same one from the last article, with the gold version added:
“If a pop-up tells you to call a number, or anyone tells you to buy gold, that is a scam. Hang up and call me first. We will check it together.”
That is the whole conversation. The gold bar scam, like every scam in this series, cannot survive a single check-in with a person who loves you.
What to Do Now
Take the next step today, whichever one fits:
- If you use a computer and have never heard of this scam before: tell one other person about it. The pop-up-to-courier pipeline is new enough that most people still have not seen it described.
- If an older relative uses a computer: have the one conversation today. “If anyone tells you to buy gold, call me first.”
- If it already happened to you or someone you love: report it at ReportFraud.ftc.gov and at the FBI’s IC3, and tell the bank.
Remember the two tells. No government agency or bank will ever tell you to buy gold. And nobody collects valuables from your door, ever.
The pop-up is not a virus. It is a sales pitch - and you are the product. Now you know the price.
This is the third article in the Scam Awareness series. More coming - if there is a scam you keep hearing about and want explained, let me know and I will write it up.
If this helped, there is more where it came from. The Basic Hub sends one practical guide a week - no spam, no jargon. Sign up below so the next one finds you.