That Virus Pop-Up Warning Is A Scam — How To Tell

You are browsing normally when the screen suddenly fills with a flashing warning. Your computer is infected, a loud voice or alarm starts, a countdown may be running — and in big letters there is a phone number to call for help right away. Take a breath: that number is the tell. The Federal Trade Commission warned in April 2025 that these seemingly urgent security messages are a route into a tech support scam, and Microsoft says the same thing in its own words — genuine Microsoft error and warning messages never include a phone number. If a warning gives you a number to call, it did not come from a real security company.

What Arrives

It usually starts as a web page, not as a real alert from your computer. You click a search result, an ad, or a link, and a page made to look like a warning from Microsoft, Apple, or Geek Squad takes over the screen — sometimes in full-screen mode, sometimes with sound that will not stop, and sometimes with pop-ups that reappear as fast as you close them. The page claims your device is infected or blocked and urges you to call the number on screen immediately, or to click a link, before your files or accounts are lost.

If you do call, the FTC describes what happens next: the person who answers says your device is infected — which is a lie — and then tries to sell you a solution, which is the scam. That can mean paying for a bogus support service, letting the caller connect to your computer remotely to “fix” it, or being walked toward your bank accounts. The pop-up itself is just a web page. The phone call is where the real harm is done, which is why every version pushes so hard to get you on the phone.

The 5 Red Flags

1. There is a phone number in the warning. This is the headline sign, and it settles the question on its own. The FTC is direct: security pop-up warnings from real tech companies will never ask you to call a phone number. Microsoft confirms that its error and warning messages never include one. A number on screen means fake — every time.
2. The warning arrived out of the blue while you were browsing. Real tech companies do not contact you unexpectedly to say there is a problem with your computer, and Microsoft says it will never proactively reach out to provide unsolicited support. A warning you did not ask for, from a page you just landed on, is a page — not a diagnosis.
3. It is loud, full-screen, and built to panic you. Alarms, recorded voices, countdown timers, and warnings that your files will be deleted are theatre. They exist for one reason: a frightened person calls; a calm person closes the page — and closing the page ends it.
4. They want remote access to your computer. Once on the phone, the caller asks you to download a program or let them connect so they can fix the problem. That access can expose passwords, banking, and personal files, and it is never how a warning on a web page should lead anywhere.
5. They want payment for the fix — especially by gift card, wire, crypto, or payment app. The sale at the end is a bogus support service or a fake cleanup. Real help does not begin with an urgent pop-up, a phone call you were pushed into, and a hard-to-reverse payment.

What Real Companies Actually Do

Here is the calm version, from the FTC and Microsoft. Real security warnings never ask you to call a phone number. Microsoft never makes unsolicited calls or sends unsolicited messages to offer support, and any communication with Microsoft has to be started by you. If there really is a problem with your computer, you find out your way: update your computer’s own security software and run a scan yourself — the FTC recommends exactly that — or go to a company you already know and trust, using contact information from its official website that you typed yourself, never from the pop-up. Some stores that sell computer equipment also offer technical support in person. None of those real routes begin with an alarm and a phone number.

What To Do Instead

• Do not call, do not click, and do not download anything the page suggests. Nothing on that screen can help you, and the number is the trap itself. Not calling is a complete and correct response.
• Close the browser. Microsoft’s advice for a screen filled with scary pop-ups is to close your browser right away — try Alt+F4 on a Windows computer if the mouse will not close it — and if the browser will not close, restart the computer. The warning is a web page; when the browser is gone, the warning is gone.
• Check your computer your way. Once the page is closed, update your computer’s security software and run a full scan yourself, from the software already on your device. If the scan is clean and the warning never returns outside that page, you have your answer.
• Get help from someone you chose. If you are still worried, contact a company you know and trust using information from its official website or a bill you hold — never a number from a pop-up, a search ad, or the warning itself — and describe what you saw.
• Report it and protect your accounts. Report the pop-up to the FTC at ReportFraud.ftc.gov. Use a long, unique password for your email and banking, turn on two-step verification wherever it is offered, and consider a hardware security key such as the YubiKey 5C NFC for your most important sign-ins, so a stolen password alone is never enough to get in.

Already Called, Paid, Or Let Someone In? Do This Next

First, take a breath. These pages are engineered — full screen, sound, official-looking logos, a practiced voice on the phone — to push a careful person into acting fast. Being drawn in is not carelessness; it is what the page is designed to do. What matters now is acting in the right order, quickly and calmly:

1. Call your bank first. If you paid, shared banking details, or opened your accounts while the caller was connected, call your bank right away using the number on the back of your card, explain what happened, and ask what can still be stopped and whether your accounts need extra protection. Speed matters — do this before anything else. If you paid a card company or a gift card company, contact that company immediately as well and report it.
2. Change your passwords from a clean device. If you entered any password while the caller could see your screen, or let anyone connect remotely or install anything, change your important passwords — email first, then banking — from a different device you trust, and turn on two-step verification. Treat any password the caller may have seen as no longer private.
3. Get the device checked before you trust it again. Stop using that computer for banking until it has been checked. Remote access can leave software behind, so have the device looked over by help you chose yourself — remotely or in person — and run a full security scan before you sign in to sensitive accounts on it again.

#ad Disclaimer: As an Amazon Associate and affiliate partner, AOP3D earns from qualifying purchases made through links in this post.

Got a weird text? Describe it in the comments and we'll check it

🧙 AOP3D Tech — Rockport's Tech Wizards · Text 781-507-1606 · aop3d.com