Free, independent guides. Not official support for Norton, McAfee, Microsoft or any manufacturer.

Fake virus alerts and browser pop-ups

Not every alarming security message is a real warning. Here is how to tell the difference, close it safely and stop it coming back.

Applies to
Windows 11 and 10
Difficulty
Easy
Time
About 6 minutes
Updated

Quick answer

Do not call the number or click anything inside the alert. Close the browser, using Task Manager if it will not close, and do not restore the tabs. Then remove notification permissions and run a quick scan. Your files are almost always fine.

Scam pop-ups are designed to frighten you into acting fast. They are web pages pretending to be your computer. Closing them properly is usually all it takes, and your files are almost always fine.

  1. Recognise the warning signs

    A fake alert usually has several of these:

    • It fills the whole screen, flashes, beeps or plays a recorded voice.
    • It shows a phone number and tells you to call "Microsoft support" or a security company.
    • It has a countdown, or threatens that your files or bank account are at risk.
    • It appears inside your web browser, not in the Windows Security app.
    • It asks you to install software, allow remote access or pay, sometimes with gift cards.

    Microsoft and genuine antivirus companies do not put phone numbers in their warnings.

  2. Do not call and do not click inside it

    Do not phone the number, and do not click any buttons in the alert, including ones labelled "Close", "Cancel" or "Scan". On a scam page, any button can lead somewhere else.

  3. Close the browser safely

    Try the browser's own close button at the very top right of the window. If the page will not let you, press Ctrl + Shift + Esc to open Task Manager, select your browser, and choose End task.

    When you reopen the browser, do not restore the previous tabs if it offers to.

  4. Remove notification permissions

    Some fake alerts arrive as notifications from a site you once allowed by mistake.

    • Chrome: Settings, then Privacy and security, then Site settings, then Notifications.
    • Edge: Settings, then Cookies and site permissions, then Notifications.

    Remove any site you do not recognise or did not mean to allow.

  5. Check extensions and run a scan

    Open your browser's extensions page and remove any you did not install yourself. Then open Windows Security, choose Virus & threat protection, and run a Quick scan.

  6. If you already called or gave access

    It happens to careful people too. Act quickly:

    • Disconnect the PC from the internet.
    • Uninstall any remote-access program the caller asked you to install.
    • From a different device, change your email and banking passwords.
    • If you paid or shared card details, call your bank using the number on the back of your card.
    • Report the scam. In the US, use ReportFraud.ftc.gov. In the UK, contact Action Fraud.

Did this guide solve it?