SCAM CHECK

Is This Fake Antivirus Popup A Scam?

A browser popup screaming "YOUR COMPUTER IS INFECTED — CALL MICROSOFT IMMEDIATELY"? Always a scam. Real antivirus alerts don’t take over your browser or scream at you.

Updated May 25, 2026 · By SmartOne · 5 min read

Some links in this guide pay us a small commission. We only recommend tools we use and trust. It never costs you extra, and it helps keep the lights on at Making Sense Of Security.

The Short Answer

Yes, This Is A Scam If…

The alert is inside your browser (not your operating system), it pretends to be from Microsoft / Apple / Norton, and it tells you to call a phone number. Browsers cannot detect viruses on your computer. Anything claiming otherwise is a scam — close the tab.

Quick Risk Checklist

If any of these match the message you got, treat it as a scam until you’ve verified directly with the real company or agency.

  • ⚠The alert appears in your browser, not as a system notification.
  • ⚠It has a loud audio voiceover or system-error sound.
  • ⚠It claims to be from Microsoft, Apple, Norton, or McAfee.
  • ⚠It tells you to call a phone number to "remove the virus."
  • ⚠It says don’t close the page or restart — that would "damage the system."
  • ⚠It pretends to scan your computer with a fake progress bar.

What The Scam Looks Like

Here’s the actual wording from a real scam — links are defanged so you can’t accidentally tap them.

From: (your browser, on a hijacked or malvertised website)
⚠️ CRITICAL ALERT — Your computer has been infected with the Zeus Trojan virus. Your banking details and personal photos are at risk. DO NOT close this window. Call Microsoft Support immediately to remove the virus and prevent data loss:
1-(800) 555-0199 (the trap is the call)
— Fake "Microsoft Support" popup

“Defanged” means we replaced the dot in the URL with [.] so it can’t be clicked. Scam URLs stay unclickable on this page on purpose.

What To Do Right Now

If you got this and haven’t tapped anything yet, here’s the order of operations.

  1. •Close the tab or quit the browser. On Mac: Cmd+Q force-quit. On Windows: Ctrl+Shift+Esc → end browser process. On iPhone/Android: close the browser app from the app switcher.
  2. •Do not call the number. That phone number is the scam.
  3. •Restart your computer or phone. The popup will not return unless you revisit the same website.
  4. •Run a real antivirus scan from your OS-bundled tool (Windows Defender on PC, Apple’s built-in XProtect on Mac) — or a real third-party AV you actually installed.

What If You Already…

Don’t panic. Most damage is undoable if you act quickly. Pick the one that applies and follow the recovery steps.

… Called The NumberRecovery Steps →
… Installed Their SoftwareRecovery Steps →
… Gave Them Card InfoRecovery Steps →
… Gave Remote AccessRecovery Steps →
… Shared A CodeRecovery Steps →
… Sent MoneyRecovery Steps →

Recovery Library is in build. These links go to placeholder pages until those guides ship.

How To Tell A Real Virus Alert From A Fake One

  1. •Real OS alerts come from your operating system — they’re not inside a browser tab. Windows Defender shows in the system tray; macOS uses native dialogs.
  2. •Real antivirus apps don’t dial out for phone support. Norton, McAfee, and Microsoft route you to in-app help, not phone calls.
  3. •Browsers cannot scan your computer. Any "in-browser scan" is theater.
  4. •If you’re worried after closing the tab, run a full scan with Windows Defender (Settings → Privacy & Security → Windows Security → Virus & Threat Protection → Quick Scan).

Where To Report A Fake Antivirus Popup

Take The 60-Second Scam Check Quiz

Eight quick questions about the message you got. We’ll give you a risk score and what to do next.

Scam Check Quiz

Is This Fake Antivirus Popup A Scam?

Answer Yes or No for each. We’ll give you a score and 3 specific next steps.

Common Questions

Can A Website Actually Detect Viruses On My Computer?

No. Websites are sandboxed by your browser and have zero visibility into your filesystem, RAM, or other apps. Any claim to have scanned your computer is fake.

What If I Can’t Close The Popup?

Force-quit the browser. Mac: Cmd+Option+Esc. Windows: Ctrl+Shift+Esc → End Task. iPhone/Android: swipe the browser away from the app switcher. Then restart the browser without restoring the previous session.

I Called The Number And Let Them On My Computer — What Now?

Uninstall any software they installed (TeamViewer, AnyDesk, "system cleaner"). Disconnect from internet temporarily. Change every important password from a different device. Run a full antivirus scan. If you gave card info, call your bank from the number on your card.

Will I Get The Popup Again?

Only if you revisit the same website or click the same ad. Modern browsers (Chrome, Safari, Firefox) block most of these, but malvertising still slips through occasionally. Use uBlock Origin or your browser’s built-in protections.

How Did The Site Know My Computer Has "Issues"?

It didn’t. The popup is the same script shown to everyone who lands on the page. The numbers and details are all fake.

Free Download

Fake Antivirus Popup Scam Check — Printable Checklist

One-page printable. Stick it on the fridge or save it to your phone.

Download The Checklist (PDF)

Related Guides

Last updated May 25, 2026 · Written by SmartOne · Comments disabled on Scam Check pages

Stay In The Loop

Weekly: the 3 scams trending this week — 2-minute read. No spam.

We won't send you spam. Unsubscribe any time.