Safety
Setup scams aimed at vacuum owners, and how they work
The scripts change; the tactics do not. This page takes a typical fake setup pop-up apart and lists the signals of a genuine setup.
Checked 3 October 2026
Anatomy
A fake setup pop-up, annotated
ImitationRobot vacuum setup failedAccount locked for security reasons.Ring the approved setup line now on the number below.Payment by gift card restores access within 30 minutes.Continue
Each numbered sign opens the reason it gives the imitation away.
Genuine setup begins in the maker’s app. A number in a pop-up connects to whoever bought the pop-up.
Words that suggest an endorsement cost nothing to type and prove nothing about who is behind the message.
A locked account or failed setup is the hook; genuine faults show up inside the maker’s app.
Gift cards, cryptocurrency and wire transfers are chosen because they are hard to trace and nearly impossible to reverse.
Thirty minutes leaves no time to check, which is the point.
Tactics
Five tactics, one script
Borrowed authority
The message or caller claims to speak for the maker, or for a team endorsed by it. A brand name in a pop-up or on a call is not evidence of anything.
An invented fault
Something is said to be broken: an expired registration, a blocked account, a robot that must be unlocked. Genuine apps report real faults inside the app.
A manufactured deadline
The fault must be dealt with in minutes. Urgency is there to stop the owner from pausing to check.
Remote access
A tool is installed so that someone else can operate a computer or phone. Once connected, the caller can see and change whatever is on it.
Untraceable payment
Gift cards, cryptocurrency and wire transfers are requested because they cannot easily be traced or reversed.
Signals
What genuine setup looks like
- A code on the device. Some robots carry a printed QR code, and scanning it leads to the genuine app listing.
- The developer line. On a genuine store page, the developer field carries the maker’s name or that of its parent business, such as iRobot Corporation on Roomba Home or SharkNinja Operating LLC on SharkClean.
- The maker’s own domain. Links in a genuine listing lead to the maker’s own site, such as sharkclean.com.
- Codes stay in the app. Verification codes and passwords are typed into the app on the owner’s phone and never read out to anyone.
- No setup fee. Setting up a vacuum app costs nothing.
Reporting
Where impersonation is reported
The Federal Trade Commission’s guidance on computer-impostor scams traces the same pattern, and warns against handing remote control of a computer to anyone who gets in touch out of the blue.
- United StatesFederal Trade Commissionreportfraud.ftc.gov
- CanadaCanadian Anti-Fraud Centreantifraudcentre-centreantifraude.ca
- AustraliaScamwatchscamwatch.gov.au
- IndiaNational Cyber Crime Reporting Portalcybercrime.gov.in
Where remote access has already been given, the FTC recommends bringing security software up to date, scanning the computer and replacing any password that was revealed. A bank or card company can also be told about payments made by card.