A Hanover County, Virginia, resident lost nearly $50,000 after responding to a computer warning that appeared to come from Microsoft and ultimately allowing a stranger to remotely access the device.
Hanover County Sheriff’s Office investigators identified 24-year-old Christopher Louis Wilson of Milwaukee, Wisconsin, as the suspect in a case that began in March and eventually led authorities across state lines.
Investigators worked with the victim and financial institutions as they traced the financial and electronic evidence connected to the loss. Investigators eventually developed Wilson as a suspect and obtained search and arrest warrants.
Wilson was extradited from Wisconsin on Sept. 30. Hanover General District Court records now show that he faces felony charges of obtaining money by false pretenses and computer fraud involving alleged larceny or embezzlement of at least $1,000.
The Scam Began With a Fake Microsoft Pop-Up
The victim reported the fraud on March 13 after a warning appeared on the computer that appeared to come from Microsoft. The warning directed the victim to contact someone presented as being with Lumen Technologies.
After making contact, the victim granted the person remote access to the computer. Investigators said the suspect then gained access to financial information and nearly $50,000 was removed from the victim’s bank account.
The names of Microsoft and Lumen Technologies were used during the alleged scam. Microsoft warns that genuine Microsoft error messages do not include telephone numbers directing users to call for support. The company also says it does not make unsolicited contact offering technical assistance.
Investigators Traced the Case From Virginia to Wisconsin
The investigation continued for more than six months. Hanover County Sheriff Greg Six said investigators worked with the victim and financial institutions before developing Wilson, who lived in Milwaukee, as the suspect.
Detectives obtained search warrants and arrest warrants during the investigation. Wilson was ultimately taken into custody in Wisconsin and returned to Hanover County on Sept. 30.
Official Hanover General District Court records show that two felony cases were filed against Wilson on Oct. 1. Case GC26015023-00 charges him with obtaining money by false pretenses involving at least $1,000 under Virginia Code §18.2-178.
A second case, GC26015024-00, charges Wilson with computer fraud under Virginia Code §18.2-152.3. The court describes that charge as computer fraud involving larceny or embezzlement of at least $1,000 and classifies it as a Class 5 felony.
Both court records list March 9 as the alleged offense date and Sept. 30 as Wilson’s arrest date. The March 9 entry precedes the victim’s March 13 report to the sheriff’s office and reflects the date assigned to the alleged offenses in the criminal cases.
Virginia’s computer fraud law covers certain uses of a computer or computer network to obtain property, commit larceny or embezzlement, or convert another person’s property. The state’s false pretenses statute addresses obtaining money or other property through deception with intent to defraud.
Wilson Remains Listed in Custody as Court Proceedings Continue
The court records list Wilson as being in custody and identify Peter Bowen as his attorney. His Oct. 1 arraignment was continued.
A bond hearing is scheduled in Hanover General District Court for Oct. 14 at 8:30 a.m. The docket also lists another hearing for Dec. 9 at 9 a.m.
Tech Support Scammers May Ask for Remote Access to the Device
The Federal Trade Commission warns that tech support fraud frequently begins with a bogus security message designed to convince a computer user that a virus or another serious problem requires immediate attention.
Once a victim calls the number displayed in the warning, the scammer may seek permission to remotely control the computer. That access can expose passwords, banking information and other personal data while also allowing the scammer to see information stored on the device.
The FTC advises consumers not to use telephone numbers displayed in unexpected computer warnings. Anyone concerned about a legitimate technical problem should instead contact the company through a verified website or another trusted source.
Disconnect Access and Contact the Bank Immediately
Anyone who has already allowed an unknown person to control a computer should end the remote session and remove remote-access software installed at the person’s direction.
Microsoft recommends running a security scan, removing software installed during the interaction and changing passwords that may have been exposed.
If banking information may have been viewed or money has already moved, the financial institution should be contacted immediately so it can secure the account, investigate transactions and determine whether a transfer can still be stopped or recovered.
Victims should also preserve information connected to the interaction, including screenshots of warnings, telephone numbers, emails and transaction records. Hanover County residents who believe they encountered a similar scheme can contact the Hanover County Sheriff’s Office non-emergency line at 804-365-6140 or Metro Richmond Crime Stoppers at 804-780-1000.
Wilson is accused of the offenses and has not been convicted. He is presumed innocent unless proven guilty in court.