Safeguard
Security Guides•

Tech support and fake official calls: signs and a script to refuse

Pop-ups that tell you to call, a technician on the phone, an official telling you to move money. FTC signs of the scam and a short script for refusing.

Safeguard Security Team
3 min read

Real security warnings never ask you to call a phone number, legitimate tech companies do not cold call about computer problems, and government workers never tell you to move your money. If any of that happens, hang up and contact the organization on a number you already know.

Signs listed by the FTC

  • Fake pop up warnings that look like they come from a well known company and tell you to call a number
  • Unexpected calls or texts from someone posing as a technician
  • A request for remote access, followed by claims of viruses or hacking and an offer to fix them for a fee
  • Subscription renewal notices that use familiar brand names and pressure you to call quickly
  • Requests for payment by gift card, wire or bank transfer, cryptocurrency or payment app
  • Callers claiming to be government officials who say your money is at risk and must be withdrawn, moved or converted to gold or cash

On the last one, the FTC says government workers never do this.

Why busy professionals get caught

A warning appears during a hectic day. It looks serious and the number is right there. The caller is calm and sounds helpful. They ask you to install a tool "so they can look." Every step feels reasonable.

Authority also helps scammers. A caller who says they are from a bank fraud team or a government office relies on you not wanting to look foolish by questioning them.

A script that works

Practise these lines so you can say them when stressed.

  • "I will call you back on the number on the back of my card."
  • "I do not give remote access to anyone who calls me."
  • "I will check with my company's IT team."
  • "No agency can ask me to move money. Goodbye."

Then hang up. Use a fresh call, not the same line, to reach the real organization.

What to do instead

  1. Close the pop up. If the browser will not close, restart it or the device.
  2. Update security software and run a scan if you suspect a real problem.
  3. Call the company using a number from its official site or your own records.
  4. Ask someone you trust if unsure. The FTC suggests talking to someone you trust.

If you already responded

The FTC advises changing your password right away, and changing it elsewhere if you reused it. For payment or access, follow our steps in what to do after paying a scammer. Check your card or bank account for unauthorized tech support charges and ask for a reversal. If no charge exists, a renewal message was likely a scam. Report it at ReportFraud.ftc.gov.

For executives

Extend the rule to the family. A parent or relative may get the same calls, and an executive's household is a softer path to the executive. Share the script.

Quick check

Do real security pop ups ever ask me to call a number?

No. The FTC says real security pop up warnings will never ask you to call a phone number.

Sources

Last reviewed: 19 October 2026.

Never miss an update

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.