Scams & safety

That Virus Warning on Your Screen Is Almost Certainly a Scam

A pop-up says your computer is infected and gives you a number to call. Here is why it is fake and exactly what to do instead.

You are reading the news or looking something up, and the screen suddenly fills up. Red banners. A siren noise. A voice telling you not to turn off your computer. A Microsoft or Apple logo, a warning that your machine is infected and your banking details are at risk, and a phone number in large letters to call right now.

Take a breath, because here is the important part.

It is fake. Every single time. Your computer is not infected, nothing is being stolen, and there is nothing wrong.

That is not me being reassuring. It is a plain fact about how computers work: a web page cannot scan your computer for viruses. It has no ability to do that. Any web page claiming to have found an infection is lying, because it could not possibly know. Microsoft and Apple also never, under any circumstance, put a phone number on a warning message. Not once, not ever.

This is the single most common thing I get called about, and it is the one that costs people the most money when it goes wrong. So let me walk through it properly.

How to know it is fake in about three seconds

Real warnings from your computer are quiet and boring. They appear in the corner, they are small, they use plain language, and they never ask you to phone anyone.

A scam warning does the opposite, on purpose. Look for any of these:

  • A phone number to call. This is the giveaway. Microsoft, Apple, Windows Defender, Norton, McAfee, and your internet provider will never show you a number in a warning. If there is a number, it is a scam. Stop reading the rest of it.
  • It came from a web page, meaning it appeared while you were browsing, and there is a web address bar somewhere at the top of the screen.
  • Urgency and fear. Countdown timers, "do not shut down your computer", "your data will be deleted in 5 minutes", flashing red.
  • Noise. Alarms, beeping, or a recorded voice. Your computer does not do this.
  • It fills the whole screen and seems to have no close button, or the close button does nothing.
  • Spelling and grammar that is slightly off, or a mix of company names that would not appear together, like a Windows logo on a Mac.

If it ticks even one of those, particularly the phone number, you can treat it as fake with complete confidence.

What happens if you do call

I want to be specific about this, because "it is a scam" is abstract until you know what it actually looks like.

Someone friendly and professional answers, often introducing themselves as being from Microsoft support. They will ask you to install a program so they can "take a look" at your computer. That program is real remote-access software, the same kind legitimate technicians use, and installing it hands them full control of your machine.

Then they will show you things. They will open a screen full of scrolling text, or a log full of red warning entries, and tell you these are viruses. They are not. Those screens are normal parts of Windows that look alarming if you have never seen them, and they exist on every healthy computer in the world. It is theater, and it is convincing, and it is designed to be.

Then comes the price. Several hundred dollars for a "security package," often a multi-year plan. Sometimes they ask for gift cards, sometimes a bank transfer, sometimes they walk you into your online banking "to process the refund" and move money out while you watch.

And once they have had remote access, they have had access to whatever was on the machine. Saved passwords. Documents. Your email, which is the key to resetting every other account you own.

The worst version of this is the follow-up call weeks later, from someone claiming to be helping you get your money back from the first scam. Same people. Same script.

What to do right now, if it is on your screen

Do this in order.

1. Do not call the number. Nothing else on this list matters as much.

2. Close the browser without clicking anything inside the warning. Do not click "Close," "OK," "Scan Now," or the X inside the page, because those are just pictures of buttons and they can do anything. Instead:

  • On Windows, press Ctrl + Shift + Escape to open Task Manager, find your web browser in the list (Chrome, Edge, Firefox), click it once, and click "End task."
  • On a Mac, press Command + Option + Escape, select your browser, and click "Force Quit."
  • If that feels like too much, simply hold the power button on the computer for ten seconds until it turns off, then turn it back on. That is fine. You will not damage anything and you will not lose more than an unsaved document.

3. When you reopen your browser, decline to restore the previous tabs. If it asks whether you want to reopen your pages, say no, or the warning comes straight back.

4. That is it. There is genuinely nothing else to do. Your computer was never infected. You do not need to run a scan, buy anything, or change your passwords.

What to do if you already called them

This part matters, and please do not be embarrassed. These scams are professionally built to work on smart, careful people. I have helped retired engineers and a former bank manager through exactly this. Being fooled by a good con says nothing about you.

Move through this list as quickly as you can:

  1. Disconnect the computer from the internet. Unplug the network cable, or turn off the Wi‑Fi, or switch the router off at the wall. This ends their access immediately.
  2. Call your bank if you gave any card or account details, or if you let them near your online banking. Use the number on the back of your card, not any number they gave you. Tell them plainly it was a remote-access scam. Banks deal with this constantly and know the process.
  3. Change your email password first, from a different device such as your phone, then your banking password. Email first, because whoever controls your email can reset everything else.
  4. Do not let anyone "help you get the refund." Any call, email, or text offering to recover the money is the same crew coming back for a second pass.
  5. Have the computer properly cleaned. Remote-access software was installed and it may still be there, along with whatever else they added while they had control. This is not something to guess at, and it is exactly what my virus and malware removal service is for.

If you paid by gift card, call the card issuer's fraud line straight away, because occasionally the funds have not been drained yet and it can be stopped.

The other versions of the same trick

Once you can spot the pattern, you can spot the whole family of them. It is always: manufactured urgency, plus a number to call or a link to click.

  • The phone call out of the blue. "This is Microsoft, we have detected a problem with your computer." Microsoft does not know your phone number and does not monitor your computer. Hang up. You do not owe them politeness.
  • The refund or subscription email. "Your Norton subscription renewed for $499. Call to cancel." You never had that subscription. The whole point is to get you to phone.
  • Delivery and package texts. "Your parcel could not be delivered, update your address here." The link takes your card details.
  • The grandchild in trouble. A call or message claiming a grandchild has been arrested or is in hospital and needs money urgently, always with a reason you must not tell anyone else. That secrecy request is the tell. Hang up and call your grandchild directly on the number you already have.

The common thread in all of it is being rushed. Real organizations do not mind if you hang up and call them back on a number you looked up yourself. Scammers cannot survive that, which is why they will do everything they can to keep you on the line.

Making it less likely to happen at all

There is no way to become immune to seeing these, because they arrive through ordinary advertising on ordinary websites. But you can reduce how often they get through and how convincing they are when they do.

Keeping your browser and your computer updated closes the tricks that let a page take over the whole screen. A decent ad blocker stops a large share of these before they ever load, since they mostly arrive through advertising networks. And turning off browser notification permissions matters more than people realize, because if you ever clicked "Allow" on a site asking to send notifications, it can push fake alerts to your desktop even when your browser is closed.

Setting all of that up correctly is part of what I do on a new computer setup, and it is a big part of the patient one-on-one help I do with older adults, which is honestly my favorite part of the job. Not a lecture, just sitting down together, going through what real warnings look like versus fake ones, and getting the protections in place.

The rule worth remembering

If you take one thing from this page, take this:

No real computer warning ever gives you a phone number to call.

That one rule catches nearly all of it. If there is a number, close the browser and get on with your day.

And if you are ever staring at something and are not sure, call me instead and ask. 860-786-1616. I would far rather spend two minutes telling you it is nothing than spend a week helping you sort out the aftermath. There is no charge to ask, and I will not think the question is silly.

If something did get through and you want the machine checked over properly, drop it off and I will tell you what I find and what it costs before I touch it. If you would rather I came to you, or you just want to ask a question first, that works too. I am in Storrs and I cover eastern Connecticut.