That virus warning on your screen? It is the scam.

My dad called me last year in a panic. "There's a warning on my computer saying I have 47 viruses and I need to call Microsoft immediately." He had not called the number yet, thankfully, but he was about to. The pop-up had taken over his whole screen, the browser was frozen, and there was an alarm sound playing on loop.

It was not a virus. It was not Microsoft. It was a webpage designed to look terrifying so he would pick up the phone and hand a stranger control of his computer.

How the scam works

You are browsing the web normally. Maybe you clicked an ad, visited a sketchy site, or followed a link from a search result. Suddenly a full-screen warning appears. It looks like it is from Microsoft, Apple, or your antivirus software. There is a phone number to call "immediately."

Here is what happens if you call:

1. A very professional-sounding person answers. They claim to be from Microsoft, Apple, Norton, or whatever brand the pop-up showed.
2. They ask you to install remote access software (TeamViewer, AnyDesk, UltraViewer) so they can "diagnose the problem."
3. Once they are on your machine, they open technical-looking screens (Event Viewer, command prompts) and point to normal system messages, claiming they are evidence of hacking.
4. They tell you the "repair" will cost $200 to $800. Some offer annual "protection plans" for even more.
5. They either charge your card directly or, in more aggressive versions, access your banking while they have remote control and transfer money out.

Some variants skip the pop-up entirely and start with a cold call: "Hello, this is Microsoft Support. We have detected unusual activity on your computer." Same scam, different entry point.

Why the pop-up feels so real

Because it is designed to. The pop-ups use real logos, real-sounding error codes, and language that mimics what actual security software says. Some even make it hard to close the browser tab, using JavaScript to keep re-opening the warning or putting your browser into full-screen mode. It feels like your computer is locked. It is not. It is just a webpage.

The alarm sound is the key psychological weapon. Nothing makes a non-technical person panic faster than a loud siren coming from their computer. Panic leads to phone calls. Phone calls lead to money.

Who falls for this

The FTC says tech support scams cost Americans over $900 million in 2023. The average victim is older, but not exclusively. Anyone who is not sure how their computer works under the hood is vulnerable, which is most people.

The scammers specifically target people who do not know that a real virus warning would never include a phone number, would never play an alarm sound through the browser, and would never tell you to call someone. If you know that, the scam loses all its power.

How to close a fake virus pop-up

• Try closing the tab. Click the X on the tab, not on the pop-up itself (the pop-up's "X" button might be fake and trigger more pop-ups).
• Force-quit the browser. On Windows: Ctrl+Alt+Delete, open Task Manager, find your browser, click End Task. On Mac: Cmd+Option+Esc, select the browser, click Force Quit.
• Do not click anything inside the pop-up. Not "OK," not "Cancel," not the X. Any click inside the pop-up window might trigger a download or open more pop-ups.
• After closing, clear your browser cache so the pop-up does not come back when you re-open the browser.

What to do if you already called and gave them access

If you let someone remotely access your computer, act fast:

1. Disconnect from the internet right now. Unplug the ethernet cable or turn off Wi-Fi. This cuts off their access immediately.
2. Uninstall the remote access software they had you install (TeamViewer, AnyDesk, UltraViewer, or whatever they used).
3. Run a full antivirus scan. Use Windows Defender (built into Windows) or your existing antivirus. They may have installed malware or keyloggers while they had access.
4. Change your passwords from a different device. If they were on your computer, assume they saw anything you had open or saved. Start with email and banking passwords.
5. Call your bank if you gave them payment info or if they accessed your banking while they had remote control. Dispute any charges.
6. Report it to the FTC at reportfraud.ftc.gov and the FBI's IC3 at ic3.gov.

For a full step-by-step recovery plan, see our what to do if you got scammed guide.

The rules that make this scam obvious

Memorize these and you will never fall for it:

• Microsoft, Apple, and Google will never show a pop-up in your browser with a phone number to call. Never.
• Real antivirus software runs quietly. It does not play alarm sounds through your speakers.
• No legitimate company will ever cold-call you to tell you your computer is infected.
• No real tech support will ever ask you to pay with gift cards, wire transfers, or crypto.
• No real tech support will ever ask you to install remote access software from a phone call.

If you remember nothing else from this article, remember this: real security software does not have a phone number. If there is a phone number, it is a scam.

Related guides

• AI voice cloning scams sound exactly like your family
• Pig butchering scams: the long con costing people everything
• QR code scams are showing up everywhere
• I looked at 50 phishing emails
• What to do if you got scammed