Office Depot and Support.com to pay $35 million for falsely claiming scan detected signs of malware on consumers’ computers

Share This Page

It’s an illegal practice the FTC has challenged for decades: companies convincing consumers to pay for “repairs” on products that don’t really need fixing. The FTC alleges that Office Depot and service vendor Support.com engaged in a 21st century version of that misleading tactic. According to the complaint, the defendants tricked customers into spending millions on repairs by deceptively claiming they had found malware symptoms or infections on consumers’ computers. Separate settlements totaling $35 million convey the clear message that what really needed fixing were the companies’ sales methods.

The story starts when Office Depot brought Support.com on board to do computer repairs in Office Depot and OfficeMax stores. (Both chains are owned by the same company, Office Depot, Inc.) Office Depot branded the services as their own, but Support.com employees performed the services by remotely accessing computers that people brought to Office Depot. The companies divided the proceeds.

As part of the arrangement, since at least 2009 Support.com provided Office Depot with software called PC Health Check. Advertising the PC Health Check Program in its stores, on radio, and in print as a “free PC tune-up” or “free PC check up,” Office Depot promised that a “tech expert” would “run complete diagnostics” to “optimize” the consumer’s computer. Other promotional materials pitched the program this way: “Improve overall system performance. Security Assessment. Scans the system for viruses.”

FTC v. Office Deport and Support.com complaint exhibitOnce the defendants had consumers in the store, employees installed PC Health Check and ran it in the consumer’s presence. The screen initially displayed the question “Does your computer have any of the problems below?” Checkbox options were:

  • “Frequent pop-ups or other problems prevent me from browsing the internet.”
  • “My PC recently became much slower or is too slow to use.”
  • “I am often warned of a virus infection or I am asked to pay for virus removal.”
  • “My PC frequently crashes.”

Next came the “scan.” You’ll want to read the complaint for a detailed explanation, but it boils down to this. According to the FTC, the defendants configured the PC Health Check Program to report that the scan had found malware symptoms or infections regardless of whether the computer was infected. The malware symptoms diagnosis was triggered by checking the box next to any of those four fairly generic “symptoms” on the initial screen. Even when the program purported to be running a “Quick Malware Scan,” it was the checkbox – not the scan – that generated the diagnosis of malware symptoms.

Beginning in 2012, complaints about the practice started bubbling up from a particularly credible source: store employees. For example, even before the merger, OfficeMax used the PC Health Check Program, too. An Office Max employee told corporate managers that the software would report malware symptoms on a computer that “doesn’t have anything wrong with it” simply by virtue of the checked box. The employee wrote, “I cannot justify lying to a customer or being TRICKED into lying to them for our store to make a few extra dollars.”

Even as complaints continued to come in from employees and other sources, how did Office Depot respond? It told employees to continue advertising the service, to continue to run the PC Health Check Program, and to convert 50% or more of all runs into tech support service sales. According to the FTC, Office Depot actually paid extra commissions to store managers and employees who met their weekly goals for PC Health Check runs and tech service sales and reproaching those who didn’t.

In late 2016 a Seattle area TV station aired a segment reporting that Office Depot stores were claiming to detect malware on computers that were brand new. That’s when the company finally suspended its use of the PC Health Check Program.

The complaint charges that Office Depot falsely represented that the PC Health Check Program had detected infections or symptoms of malware on consumers’ computers and that Support.com provided Office Depot with the means and instrumentalities for the commission of deceptive practices. In addition to provisions that will change how the companies do business, the proposed settlements require Office Depot to pay $25 million and Support.com to pay $10 million more.

What can other companies take from the case?

Service representations are subject to the FTC Act. Even if you’re careful to substantiate your product claims, what about your service promises? They’re covered by established consumer protection principles, too, and you need appropriate proof to back up those representations.

Fear-mongering shouldn’t be a sales strategy. When a service professional reports that the doohickey is dying or the thingamabob is about blow, a consumer’s understandable response is to reach for the wallet, especially when the warning is about complicated equipment people aren’t in a position to repair for themselves. For many consumers, computer security concerns fall into that category. It’s unwise for companies to exploit those fears falsely for their own economic benefit.

Clarity begins at home. When employees express concern about a questionable business practice, savvy executives pay attention. Heeding in-house early warnings and responding appropriately may be able to prevent a more serious predicament.
 

 

Comments

I have had all of my laptops serviced there and the Office Depot aasistant manager at the Reston, VA location crashed and ruined two hard drives on my computers! They told me the same things, crashed the hard drives on.my laptops to where I lost valuable information of the past 15 years were gone forever! Unless I used the services that they told me to go to a computer forensic programmer, but it would cost me over $2000 to recover...never the less, I kept the hard drive just in case, IF tbeygave the right hard drive back!!!

I use the program and my computer no longer works and i have to trash away

We have been extremely missable dealing with the issues of our problems with our computer problems and internet connection issues and problems of issue personal and business credit issues of hackers and credit burrows not removing incorrect information off our reports and updating the correct information to our credit reports and fixing the issues with our internet/ versus on our phone and computer and has caused us so much problems and stress over the last 7-8 years I come to turns that I hate all internet and Electrical devices because they never get fixed completely...

It's easy and prevalent to lay fault at someone else's door, I believe that Office Depot may have done that, but it's the result of the individuals at the ranks to try to get that commission or look better, but as a computer tech I can assure you, most people are careless when it comes to computer usage, claiming that a computer is new is no assurance that it will be clean. I've personally seen people getting a brand new computer and immediately upon turning it on going to certain sites and getting it completely infected with viruses in a matter of minutes because they are trying to install everything in sight without knowing what they are installing. Stop and think why will someone provide absolutely free any program or game? And sorry Mariette but no way a scan is going to ruin your hard drives if they crashed they were already failing, some manufacturers would not use the best quality and there is a reason for differences in prices between business and personal class devices you may have used your computer more heavily than what it was intended to, why do you think gamers pay premium prices for their equipment?

I second ac's reply. software does not cause hardware failure. Any loss of data is due to the user not backing up their information.Support.com and office depot deserve the fine. I just wish the FTC would shut down the fake support scammers, I suggest that they redirect the 800 numbers and websites to a consumer information site

Add new comment

Comment Policy

Privacy Act Statement

It is your choice whether to submit a comment. If you do, you must create a user name, or we will not post your comment. The Federal Trade Commission Act authorizes this information collection for purposes of managing online comments. Comments and user names are part of the Federal Trade Commission’s (FTC) public records system (PDF), and user names also are part of the FTC’s computer user records system (PDF). We may routinely use these records as described in the FTC’s Privacy Act system notices. For more information on how the FTC handles information that we collect, please read our privacy policy.