Is that virus alert pop-up a scam? How to recognise fake tech support warnings
You're browsing normally when a pop-up — or a full browser takeover — announces your computer is critically infected, your personal data is being stolen, or your Windows or macOS licence has been suspended. A phone number is displayed prominently. Alarming audio may play. The window may seem impossible to close.
This is a tech support scam, and none of it is genuine. Microsoft, Apple, Google, and all legitimate antivirus companies do not display browser pop-ups with phone numbers asking you to call. These pages are served from compromised websites or purpose-built scam domains, designed purely to get you on the phone with a fake technician.
Once you call, the 'technician' asks for remote access to 'fix' the infection. They then show you fake system logs, task manager output, or scripted 'virus scans' that look alarming to a non-expert — and charge $150–$500 for a problem that never existed. Some also install real malware while they have access.
🚩 Red flags to watch for
- ▶Any pop-up, alert, or browser page that includes a phone number. Real operating system alerts and antivirus software never include a support phone number in a browser window.
- ▶The window is difficult or impossible to close normally — Ctrl+W, Cmd+W, or the X button don't respond as expected.
- ▶Alarming audio: a robotic voice repeating warnings, a siren, or a loud looping alert.
- ▶The warning claims to be from Microsoft Windows Defender, Apple Security, or 'Windows Support'.
- ▶The URL in the address bar is nothing like microsoft.com or apple.com — it's usually a random domain or IP address.
- ▶The warning accuses you of visiting illegal content or having malware associated with a crime — a deliberate fear tactic designed to prevent you thinking clearly.
✅ What to do
- 1Force-close your browser immediately: on Windows, press Ctrl+Shift+Esc to open Task Manager and End Task on the browser. On Mac, press Cmd+Option+Esc to Force Quit.
- 2Do NOT call the number — calling is the point of the scam.
- 3Restart your browser. If the page reloads automatically on startup, close it immediately before it loads.
- 4Run a real, reputable virus scan. Malwarebytes free edition is a solid starting point for both Windows and Mac.
- 5If you called and gave remote access: disconnect your computer from the internet (unplug ethernet or turn off Wi-Fi), run a full scan, and change passwords for your email, banking, and other important accounts from a different device.
- 6Install a reputable ad blocker (uBlock Origin is free and widely trusted) — many of these pages are reached via deceptive search ads.
📣 Where to report (by country)
🇺🇸 United States
🇬🇧 United Kingdom
- Action Fraud
- Police Scotland — call 101
🇦🇺 Australia
🇨🇦 Canada
🌍 Everywhere else
- Contact your local police and your bank immediately
- If money was sent, ask your bank about a recall request — act within hours
Got a suspicious message right now?
Paste it into our free AI checker for an instant pattern analysis
No account needed · Free to try · Privacy-first
Check your message free →No tool is a guarantee. AI pattern detection is a guide, not a verdict — always use your own judgment.
Common questions
My screen is completely locked by a warning and I can't do anything. What do I do?
Hold down your computer's power button for 5–10 seconds for a hard shutdown. After restarting, open your browser and immediately close any tabs before they reload. The lockout is a browser trick, not actual OS-level malware — a forced restart breaks it.
The pop-up knew my IP address and location. Does that mean it actually scanned my computer?
No. Every website you visit automatically receives your IP address and can look up an approximate location from it. This is normal browser behaviour. Displaying your IP in a warning is a cheap trick to make the alert seem personalised and technically credible.
I paid the technician before I realised it was a scam. Can I get my money back?
Contact your bank or card issuer immediately and explain it was fraud. Credit card chargebacks are often successful for these cases. If you paid by gift card (a common demand), contact the card issuer and report to the FTC — recovery is harder but not impossible if done quickly.