A fake virus warning popup is usually a scary webpage, not a real infection. It may show logos, alarms, countdowns, and a support phone number, but the goal is to make you call, pay, or install remote-access software.
Does this affect you?
Use this for iPhone, Android, Windows, or Mac when a popup says the device is infected and tells you to call a number, download an app, or act immediately.
Recognize the pattern
Real security alerts do not behave like high-pressure ads.
- Apple, Microsoft, Google, Windows Defender, and macOS do not show browser popups with a phone number to call.
- The phone number is part of the scam. It connects to someone posing as support.
- The caller usually asks for remote access through tools such as AnyDesk or TeamViewer, then demands payment or looks for banking details.
- The popup often comes from a website, bad ad, or link. Seeing it does not mean the device is infected.
- Do not call the number, download the suggested app, or enter information into the popup.
Close the popup safely
Avoid clicking inside the fake page when possible.
- On iPhone or Android, close the browser from the app switcher instead of tapping buttons inside the popup.
- On Windows, close the tab or browser. If it freezes, press Ctrl+Alt+Delete or Ctrl+Shift+Esc and end the browser task.
- On Mac, use Command+Option+Esc to force-quit the browser if needed.
- When reopening the browser, do not restore previous tabs because that may reload the scam page.
- Clear the site from browser history if you know which page caused it.
If you called or paid
The call itself is not the danger; what you did during it matters.
- Hang up if you are still on the phone.
- If you allowed remote access, disconnect from the internet and remove the remote-access app.
- If you paid by card, contact the bank or card issuer quickly to dispute the charge.
- If you paid by gift card, call the gift card issuer immediately with the card and receipt.
- If you paid by wire or cryptocurrency, report it to the bank, transfer service, or exchange, though recovery is less likely.
- File a report at reportfraud.ftc.gov.
More control
The popup alone is not usually harmful
A fake alert displayed in the browser does not infect the device just by appearing. The risk comes from calling, paying, downloading, or granting remote access.
Sources
- FTC Consumer Advice – Tech support scams (2025)
- Apple Support – Recognize and avoid phishing messages and other scams (2025)
- Microsoft Support – Protect yourself from tech support scams (2025)
Disclosure: This post may contain affiliate links which means I may receive a commission for purchases made through links. I will only recommend products that I have personally used! Learn more on my Private Policy page.