The fault may be fabricated
Ordinary notifications, harmless log entries or a deliberately alarming pop-up can be described as evidence of infection or account compromise.
Technology, platforms and channels
Is an unexpected technical-support call genuine?
An unsolicited caller or pop-up may claim that your device, account, broadband or security is at risk. The problem can be invented, while the proposed repair gives the contact access to your screen, accounts, payments or device.
Page P-016Guidance pageReviewed 29 August 2026
Key Guidance
Do not trust an unexpected support call or pop-up because it names a familiar technology company or shows a warning. End the contact. If you need help, start again through the official support route you locate independently.
Start with Key Guidance for the short answer. Then read the sections that match what happened and what you need to do.
Understand the issue
Why this matters to you
Technical problems are difficult to inspect, so a confident caller can appear to know more than the person using the device. That knowledge gap can become authority.
The caller controls the diagnosis
Every observation is interpreted by the same person who benefits from selling or performing the supposed repair.
Legitimate software can be misused
Remote-support and screen-sharing tools have genuine purposes, but an unauthorised person can use them to see information or operate the device.
Support can become payment
A repair story may lead to a subscription, refund, security transfer, gift card, crypto payment or access to online banking.
Consequences and movement
What may happen next
The decisive question is not whether technical support exists. It is whether you independently initiated this support relationship and control its scope.
A download request
The caller asks you to install a remote-access or screen-sharing tool and provide a connection code.
A false scan or demonstration
Normal system information is presented as proof of attackers, viruses or financial risk.
A banking step
You are told to sign in, check a refund, confirm a charge or move money while the screen is visible or controlled.
Persistent access
Software, unattended-access settings or stolen sign-in details may allow contact to continue after the call ends.
Practical response
What you should do
Break the caller’s combined role as diagnostician, verifier and repairer. Reconnect to support through a route the caller did not provide.
- End the call or close the pop-upDo not follow instructions, call the displayed number or continue because the contact appears patient or technically informed.
- Do not install or connectDo not download software, share a connection code, permit screen control or disclose security information.
- Use independent supportOpen the device or service provider’s genuine website or app yourself. Describe the exact warning and ask whether the contact or issue exists.
- Check before payingDo not buy support, protection, gift cards or software from an unsolicited contact, and do not accept a refund into online banking.
- Separate already-exposed devicesIf access was granted, disconnect the device from the network and use a different trusted device to contact the bank and change critical account access.
- Preserve and reportKeep the number, pop-up address, software name, payment record and messages. Report the contact and any resulting fraud.
Look more closely
An invented fault can make unusual access seem necessary
Unexpected technical-support contact often creates a problem that only the caller claims to see or solve. Verify any fault through the device or service provider before installing software, granting access or paying for repair.
A call, pop-up or message announces a technical emergency.
Fear of data loss, infection or account theft creates dependence on immediate help.
Company names, technical language and on-screen demonstrations imitate expertise.
Downloads, connection codes and banking steps keep the response inside the caller’s control.
Ending the session and choosing an independent support route removes that control.
Selected history
Historical cases and lasting lessons
Unsolicited support calls
Callers have claimed to detect device or account problems before directing people to remote access, payment or security actions.
Lasting lesson: The caller’s ability to describe a problem is not proof that the problem or authority is genuine.
Screen-sharing scams
Financial and support stories have used genuine screen-sharing software to get information and access accounts.
Lasting lesson: A genuine tool does not legitimise the person asking to use it.
Transferable understanding
Patterns over time
Confusion creates reliance
The more technical the explanation becomes, the harder it may feel to pause or seek another opinion.
Proof is staged on the victim’s device
The caller uses ordinary screens as a demonstration, making the evidence feel independently visible.
Repair crosses into finance
A technical conversation becomes high risk when it reaches banking, refunds, codes or payment.
Access can outlast the conversation
Closing the visible window may not remove installed software, saved permissions or exposed sign-in details.
Plain-language answers
Common questions
Can genuine technical support call me?
Some services may make arranged calls. Verify the appointment and person through the official service route before granting access or disclosing information.
Does a warning on my screen prove infection?
No. A webpage can display an alarming warning. Close it and use the device’s genuine security and support tools.
What if the caller knows my device or account details?
Accurate details can come from prior contact, exposed information or what the device reveals. They do not confirm present authority.
I only installed the software. What now?
Treat access as possible even if you saw no action. Disconnect the device and follow the dedicated remote-access recovery page.
Use a support route you selected yourself
If no access was granted, end and report the contact. If software, financial information or account access was involved, separate the device and contact the relevant providers promptly from a trusted device.
Scamology Insights
Recognise when help becomes the Mask for control
These learning resources can help reveal the Deviation from ordinary support into caller-directed access, banking and payment. Links are intentionally withheld in this production version.
Continue understanding
Explore related guidance
Evidence and currency