Scams & Fraud

A Pop-Up Says Your Computer Is Infected? What to Do Next

By Camille Laurent / November 11, 2026

Quick answer: A loud pop-up that says your computer is infected, locked or hacked, and tells you to call a number, is almost always a scam page, not a real alert from your computer. Do not call, do not click anything inside it, and do not let anyone take remote control of your device. Close the browser (or restart the computer if it will not close), run your own security scan, and check your browser extensions. If you already called, paid or gave access, there is a short list of steps below, and the sooner you do them the better.

Key takeaways

A real security warning from Microsoft or Apple does not ask you to phone a toll-free number.
The pop-up is usually just a web page designed to look like an alarm. Closing it is the fix.
Never give a stranger remote access, and never pay for “support” with gift cards or cryptocurrency.
If you paid by card, call your card company first; if you gave access, scan, change passwords and watch your accounts.
Report it, even if you lost nothing. Reports help investigators spot patterns.

How the fake virus pop-up works

You are reading a recipe, streaming a show or searching for something, and suddenly the screen fills with red warnings. There may be a siren sound, a message that your files are being deleted, or a claim that your computer has been blocked. A phone number is shown in large type, along with a plea not to restart or turn off the computer.

The design has one job: panic. The page is built to look like it came from Microsoft, Apple or an antivirus company, with logos, countdown timers and technical-sounding words. Nothing on your computer has actually been scanned. The “scan results” are a web page that anyone can write.

What happens if you call is the real scheme. The person on the line sounds calm and helpful, and asks you to install a remote-access program so they can “look at the problem”. Microsoft explains that once they have remote access, scammers can present perfectly normal system messages as signs of trouble. From there they sell you an expensive “cleanup”, a “subscription”, or steer you toward your online bank account. The FBI’s Internet Crime Complaint Center has warned about a refund version of this: the caller claims you are owed money, has you log in to your bank while they watch, and makes it look as if they sent too much, then asks you to send the difference back. In reality, the scammer moved your own money between your accounts.

Why these pages work so well

They borrow trust and take away time. The logos and technical words make the page feel official, and the countdown makes you feel you have no time to think. Add the instruction not to restart the computer, and a calm person becomes a panicked one in about ten seconds.

They also work because the cure looks easy: one phone call. That is the point to pause. A real problem with a computer is rarely solved by phoning the number on a web page, and no honest company needs you to hand over control of your machine in the first two minutes of a conversation. If you want a sanity check, ask yourself three questions. Did I ask for this contact? Is someone asking for payment in a hurry? Are they asking for remote access? Any yes is a reason to stop.

What to do the moment it appears

Do not call the number. Microsoft says its warning messages never include phone numbers, and the FTC advises against calling numbers or clicking links in pop-ups like this.
Do not click inside the pop-up. Apple warns that some pop-ups have fake close buttons. Even “Cancel” or “X” inside the window can be part of the trick.
Leave the page. On Windows, Microsoft suggests closing the browser with ALT+F4 if the mouse will not work, and restarting the computer if the browser will not close. On a Mac, iPhone or iPad, Apple says you can avoid interacting with the pop-up and close the Safari window or tab, or type a new address in the search field to go somewhere else.
If the page returns after you reopen the browser, do not restore the previous session. On a Mac, Apple notes you can quit Safari and hold the Shift key while reopening it, which stops it from reopening earlier windows and tabs.
Run a scan with your own tools. Update your security software and run a scan, which is the FTC’s suggested way to check for a real problem. On Windows, that means Windows Security, a built-in tool Microsoft points people to.
Look at your browser extensions and remove any you do not recognize or never chose to install. Pop-ups that keep coming back can also mean adware. Apple says repeated pop-ups on a Mac can point to unwanted software you installed by accident.

Fully closing a browser window and not engaging is usually enough. Clearing your browsing data is a reasonable extra step, but it does not make a fake alert go away by itself, because the alert is a web page, not a file on your machine.

Real alert or fake? Quick comparison

Sign	Fake pop-up	Real security alert
Phone number on screen	Prominent, “call now”	Microsoft says its warnings never include one
Where it appears	Inside a browser window, often full screen	From your installed security software or operating system settings
Tone	Urgent, countdowns, “do not restart”	Calm, with a button to open your security app
How you fix it	Call a stranger, install a program, pay	Run a scan, apply an update
Payment requested	Gift cards, crypto, wire or card	Never in gift cards or crypto
Contact	They want you to call them	You choose when and whom to contact

If you already called, paid or gave access

It happens to careful people, and acting quickly helps. Work through the list in order.

Disconnect first. If someone is connected remotely, turn off Wi-Fi or unplug the network cable so they lose the connection.
Remove what they installed. Microsoft advises uninstalling any applications the scammer had you add, then running a full scan with Windows Security. The FTC says to update your security software, scan, delete anything it flags and restart.
Change your passwords from a different, clean device if you can. The FTC says to create a new strong password and change it anywhere you reused the old one, including financial and shopping accounts the scammer could have reached.
Call your bank or card company at once if you paid by card or if they saw your bank account. Tell them what happened and ask them to dispute the charges and watch the account. Use the number on the back of your card.
If you paid with a gift card, contact the card’s issuer, say it was used in a scam and ask for a refund. The FTC says cryptocurrency payments typically cannot be reversed.
Watch your statements. The FTC notes that scammers sometimes come back for another try.
If they took control of your phone number, contact your phone provider to regain control and then change your account password. If personal information such as your Social Security number was exposed, the FTC points to IdentityTheft.gov for the next steps.
Report it. The FTC accepts reports at ReportFraud.ftc.gov, the FBI’s IC3 takes complaints at ic3.gov (keep any records, such as receipts and messages), and Microsoft asks people to report Microsoft impersonation at microsoft.com/reportascam.

Be wary of anyone who contacts you afterwards offering to recover your money, especially if they ask for a fee or for access to your computer again. Use your bank’s or the card issuer’s official channels instead.

Keeping it from happening again

Keep your operating system, browser and security software up to date.
Turn on your browser’s pop-up blocking. On Apple devices, Block Pop-ups and Fraudulent Website Warning are in Safari’s settings.
Be careful with free software downloads and browser extensions; unwanted ones are a common cause of repeated pop-ups.
Save the support page or phone number of your security software and your computer maker somewhere you control, so you never need to trust a number from a pop-up.
Tell friends and relatives who are less comfortable with tech. A two-minute heads-up works better than a clean-up afterward.

Frequently asked questions

Does the pop-up mean my computer really has a virus?

Usually not. The warning is typically a web page that is designed to scare you into calling. If you are worried, run your own security software rather than relying on the page.

I called the number but did not install anything. Am I okay?

Probably, but treat it carefully. Do not call back, do not pay, and expect more calls. Watch your accounts, and report it. Anything you said, such as an email or phone number, may be used for further attempts.

Can Microsoft or Apple actually call me about a virus?

Microsoft says it does not proactively contact people to offer unsolicited technical support, and that any contact should be one you started. Be skeptical of any unexpected call or message that claims to be from a tech company.

Will my bank get my money back?

It depends on how you paid and what happened. Card disputes and bank fraud reports are the strongest route, so call right away. Gift cards and crypto are much harder to recover, but ask the issuer anyway.

Before you decide

When a screen shouts at you, the safest move is the boring one: close it, breathe, and use tools you chose yourself. A real problem can wait five minutes for a proper scan. A scam usually cannot, which is exactly why it rushes you. If you have already gone further, do not feel foolish; call your bank, change your passwords and report it today.