What to do if…
your device shows a pop-up saying you have a virus and it tries to scare you into calling a number
Short answer
Don’t call the number or click anything in the pop-up. Close the page/app (force-quit if needed), then run a trusted security scan and report it if you shared money, personal info, or remote access.
Do not do these things
- Don’t call the number, follow the QR code, or use any “support” link in the pop-up.
- Don’t give anyone remote access or install remote-control tools because you were told to.
- Don’t enter passwords, bank info, or card details into anything connected to the pop-up.
- Don’t pay with gift cards, cryptocurrency, wire transfer, or “verification” charges for tech support.
- Don’t keep clicking the pop-up to “confirm” or “remove” anything.
What to do now
- Exit the pop-up safely.
- On a computer: close the tab/window. If it won’t close, force-quit the browser (Windows: Ctrl+Shift+Esc → end task; Mac: Option+Command+Esc → Force Quit).
- On a phone/tablet: close the app (swipe it away). If it keeps returning, restart the device.
- Stop it from reappearing.
- Turn off Wi-Fi briefly while you close/force-quit, then reopen your browser and remove anything suspicious:
- Clear recent browsing data for the time period when it happened.
- Remove any unfamiliar extensions/add-ons.
- Remove site permissions you may have granted (especially Notifications).
- Turn off Wi-Fi briefly while you close/force-quit, then reopen your browser and remove anything suspicious:
- Run a trusted security check.
- Run a full scan with your installed antivirus or built-in protections and apply recommended removals.
- Update your operating system and browser (updates often close the holes scammers exploit via ads or redirects).
- If you called, paid, or gave remote access: act fast.
- Disconnect the device from the internet.
- Contact your bank/card issuer immediately using the number on the back of your card or the bank’s official website.
- From a different, trusted device: change passwords, starting with email (because it can reset everything), then banking, shopping, and any accounts that share passwords. Turn on multi-factor authentication where you can.
- If remote access happened, consider a professional device cleanup (or full reset if advised) because you can’t easily verify what was changed.
- Report it to US authorities (use official sites).
- Report the scam to the FTC at ReportFraud.ftc.gov.
- If you lost money, gave remote access, or shared sensitive info, also file a complaint with the FBI’s Internet Crime Complaint Center — type
ic3.govdirectly into your browser to avoid lookalike sites.
What can wait
- You don’t need to prove whether it was “real malware” before taking basic protective steps.
- You don’t need to buy new security software immediately if a reputable scan and updates complete successfully.
- You don’t need to wipe your device unless there’s evidence of ongoing compromise or you granted remote access and can’t restore trust.
Important reassurance
These pop-ups are designed to scare you into reacting quickly. Many are just malicious web pages or ads pretending to be system alerts — the safe response is to stop interacting, close them, and do a calm check for changes.
Scope note
This covers first steps to stop the scam, reduce risk, and report it. If remote access or payments occurred, follow your bank’s fraud steps and consider professional help for device security.
Important note
This is general information, not legal or professional advice. If money, accounts, or identity information may be at risk, prioritize contacting your financial institutions promptly and reporting via official US channels.
Additional Resources
- https://consumer.ftc.gov/articles/how-spot-avoid-and-report-tech-support-scams
- https://reportfraud.ftc.gov/
- https://www.fbi.gov/how-we-can-help-you/scams-and-safety/common-frauds-and-scams/tech-support-scams
- https://www.ic3.gov/
- https://support.microsoft.com/en-us/windows/protect-yourself-from-tech-support-scams-2ebf91bd-f94c-2a8a-e541-f5c800d18435