Remove mshelp.netlify.app and “Microsoft Account Locked” Tech Support Scam

The “Microsoft Account Locked” scam is a fraudulent technical support scheme that falsely claims to lock a user’s phone due to detected illegal activity, such as money laundering. Victims are prompted to call a fake support number, where scammers attempt to gain remote access to their devices, steal sensitive information, and extort money.

This scam is not affiliated with Microsoft and should be avoided at all costs. Falling for such scams can lead to identity theft, financial loss, and malware infections.

Scam Details

Threat Attribute	Details
Threat Name	“Microsoft Account Locked” Tech Support Scam
Threat Type	Phishing, Scam, Social Engineering, Fraud
Fake Claim	Visitor’s phone was locked due to detected illegal activity (money laundering)
Disguise	Microsoft Alert
Tech Support Scammer Phone Number	18333982352
Related Domains	mshelp.netlify[.]app
Detection Names	N/A (VirusTotal)
Serving IP Address	34.234.106.80
Symptoms	Fake error messages, fake system warnings, pop-up alerts, hoax computer scans
Distribution Methods	Compromised websites, rogue online pop-up ads, potentially unwanted applications (PUAs)
Damage	Loss of sensitive private information, monetary loss, identity theft, possible malware infections
Danger Level	High

How the “Microsoft Account Locked” Scam Works

When a user visits a compromised website hosting the scam, they are presented with a fake Microsoft warning claiming that their phone has been locked due to money laundering activities.

Fake Warning Message:

Microsoft
Running troubleshooters in Get Help
Account Locked
Your phone is locked due to detected illegal activity. Your account has been disabled because we have found money laundering activities on this device.
Unlock now
The Microsoft Support and Recovery Assistant has been replaced with troubleshooters integrated into Get Help.
Get Help has troubleshooters you can run for many common scenarios. These often help resolve issues without the need to contact support. If a troubleshooter is available for your issue, select Start to run that troubleshooter.
Call 18333982352

Upon clicking the “Unlock now” button, victims are redirected to another deceptive page with a pop-up window instructing them to call “Emergency Assistance.”

Once the scammers are contacted, they typically impersonate Microsoft-certified technicians and manipulate the victim into granting remote access using legitimate tools such as TeamViewer or UltraViewer. After obtaining access, the scammers may:

• Disable security software to prevent detection.
• Install fake security programs to create additional issues.
• Steal private information such as login credentials, financial data, and personal identification details.
• Trick users into paying for bogus technical support services.
• Deploy malicious software such as trojans, ransomware, and cryptominers.

Why the “Microsoft Account Locked” Scam is Dangerous

Victims who fall for this scam risk serious consequences, including:

• Identity Theft: Personal data, including passport details, ID scans, and login credentials, may be stolen and misused.
• Financial Loss: Scammers often request payments via hard-to-trace methods like cryptocurrency or gift cards.
• Malware Infections: Remote access tools can be used to install trojans, ransomware, and other malicious software.
• Loss of Device Control: Attackers may lock the user out of their own device by modifying system settings.

Manual Removal Guide: How to Identify and Remove Email Scams Yourself

Step 1: Recognizing Scam Emails

Before taking action, learn to identify email scams. Some common red flags include:

• Unknown Sender: Emails from unfamiliar addresses, especially if they claim to be from banks, tech support, or government agencies.
• Urgent or Threatening Language: Messages pressuring you to act quickly (e.g., “Your account will be suspended!”).
• Poor Grammar & Spelling Mistakes: Many scam emails contain grammatical errors.
• Suspicious Links or Attachments: Hover over links to check if they lead to an unusual website before clicking.
• Requests for Personal or Financial Information: Legitimate companies will never ask for sensitive details via email.

Step 2: Avoid Interacting with Scam Emails

If an email appears suspicious:

• Do NOT click on any links.
• Do NOT download attachments.
• Do NOT reply to the sender.

Step 3: Report the Email Scam

Reporting scam emails helps prevent others from falling victim to them:

• Gmail/Outlook/Yahoo Users: Click “Report Phishing” or “Report Spam” in your email client.
• FTC (U.S. users): Report scams to the FTC Complaint Assistant.
• Google Safe Browsing: Report phishing sites at Google’s Phishing Report.

Step 4: Block the Sender

To prevent further scam emails from the same sender:

• Gmail: Open the email, click the three dots, and select “Block [Sender Name]”.
• Outlook: Open the email, select “Junk” > “Block Sender”.
• Yahoo Mail: Click “More” > “Block Sender”.

Step 5: Check Your Accounts for Compromise

If you’ve interacted with a scam email:

• Change your passwords immediately. Use strong, unique passwords.
• Enable Two-Factor Authentication (2FA). Adds an extra security layer.
• Monitor your banking transactions for suspicious activity.

Step 6: Scan Your Device for Malware

If you accidentally clicked a link or downloaded a file, scan your system for malware:

• Windows Users (Windows Defender)
  • Go to Settings > Update & Security > Windows Security > Virus & Threat Protection.
  • Click “Quick Scan” or “Full Scan”.
• Mac Users
  • Use security software like Malwarebytes for Mac to scan for threats.

Step 7: Strengthen Email Security

• Enable spam filtering in your email provider’s settings.
• Use a third-party spam filter such as Spamihilator or Mailwasher.
• Stay educated on phishing techniques to avoid falling for scams in the future.

---

SpyHunter Removal Guide: Automated Solution for Email Scam Threats

SpyHunter is a powerful anti-malware tool designed to detect and remove phishing-related threats, Trojans, spyware, and other cyber threats. If you prefer a quick and automated solution, follow these steps:

Step 1: Download SpyHunter

1. Visit the official SpyHunter download page: Download SpyHunter
2. Click “Download” and save the file.

Step 2: Install SpyHunter

1. Open the downloaded file (SpyHunter-Installer.exe).
2. Follow the on-screen installation instructions.
3. Once installed, launch SpyHunter.

Step 3: Perform a Full System Scan

1. Open SpyHunter and go to “Malware/PC Scan”.
2. Click “Start Scan Now” to begin scanning.
3. SpyHunter will detect threats linked to email scams.

Step 4: Review and Remove Detected Threats

1. After the scan completes, SpyHunter will display a list of detected threats.
2. Click "Fix Threats" to remove them.
3. Restart your computer after removal.

Step 5: Enable Real-Time Protection

• Activate SpyHunter’s Active Guards for real-time malware protection.
• Schedule regular system scans for ongoing security.

Step 6: Keep SpyHunter Updated

• Regularly update SpyHunter to detect new threats.
• To update, go to "Settings" > "Update" and click "Check for Updates".

---

How to Prevent Future Email Scams

To avoid falling for email scams in the future, follow these precautions:

Use a Secure Email Provider

Consider using encrypted email services like ProtonMail or Tutanota for enhanced security.

Avoid Clicking Suspicious Links

Always verify links before clicking by hovering over them to see the actual URL.

Use a VPN on Public Wi-Fi

Scammers can intercept your data on public networks. Use a VPN for secure browsing.

Regularly Change Your Passwords

Use a password manager to generate and store secure passwords.

Install Anti-Phishing Browser Extensions

Use security extensions like Bitdefender TrafficLight or Avast Online Security to detect phishing attempts.

---

Email scams pose a significant risk to personal and financial security. By following this manual removal guide, you can effectively identify and remove scam emails. For those seeking a fast and automated approach, SpyHunter provides a reliable solution to detect and remove email scam-related threats.

Take Action Now

Protect your device from scam-related malware with SpyHunter: Download SpyHunter

By recognizing the "Microsoft Account Locked" scam and avoiding interaction with deceptive warnings, users can protect themselves from fraud, malware, and financial loss. Stay vigilant and ensure your device remains secure by keeping security software up to date and avoiding suspicious websites.