Safe Browsing and Downloads

Pop-Ups, Fake Virus Alerts and Scareware

Learn how to recognize alarming browser warnings that push you to call a number or pay, how to close them safely, and what to do if you already responded.

On this page
  1. What this looks like
  2. Why they work
  3. Signs a warning is fake
  4. How to close it safely
  5. Notifications and pop-up ads
  6. If you already called or clicked
  7. Helping others
  8. Prevention in brief

What this looks like

You are reading an article or watching a video when the screen changes. A loud message announces that your device has a serious infection, your files are being deleted or your account has been locked. It may flash red, play a siren or voice recording, show a countdown and display a phone number you are told to call immediately. Sometimes the page fills the screen and seems to stop you from closing it.

These are almost always fake. They are known as scareware, and fake virus alerts are the best-known form. Their purpose is to frighten you into a quick decision: calling a number, installing a program or paying.

Why they work

The design relies on panic. Official-looking logos, technical words and a countdown create a feeling that there is no time to think. A person who is worried about their photos, banking or work can be pushed into doing what the screen asks.

The reality is that a web page cannot scan your device the way these alerts claim. A website in your browser does not have the kind of access that would let it find viruses on your computer. The “scan” is an animation. Real security software shows alerts from its own program, not from a browser tab, and it does not ask you to phone a stranger.

Signs a warning is fake

  • It appears in a browser window or tab rather than from software you installed.
  • It uses alarming language, sirens or a countdown.
  • It shows a phone number and tells you to call it urgently.
  • It claims to be from your operating system maker, a big brand or “technical support” without any way to confirm it.
  • It asks you to pay with gift cards, cryptocurrency or a money transfer, or to install a remote-access program.
  • It makes it difficult to close the page, for example with repeated dialog boxes.

Genuine companies do not ask for gift cards to fix a computer. Any request like that is a strong sign of fraud.

How to close it safely

  1. Do not call the number, click inside the message or press any buttons it offers, even ones labeled “Cancel” or “Close”.
  2. Try closing the tab using the normal tab close button or the keyboard shortcut for your browser.
  3. If the page is full screen, exit full screen using the key your system provides, or use the task manager or force-quit option to close the browser.
  4. If the browser reopens the same page, restart it without restoring previous tabs, or restart the device.
  5. Afterward, clear recent browsing data and review your extensions, since some pop-ups come from add-ons you installed. Reviewing browser extension risks is a useful part of cleanup.

Closing the browser does not damage anything. It is the safest action.

Notifications and pop-up ads

Some pop-ups are not full-page alarms but permission requests. A site may ask to “show notifications”, and if you allow it, the site can send alerts later, sometimes fake warnings outside the browser window. Decline requests you do not understand. You can review and remove allowed notification sites in your browser settings, where you should look for site permissions or notification settings.

Ordinary advertising pop-ups are annoying, but they are not the same as scareware. Most browsers block pop-ups by default, so keep that setting on.

If you already called or clicked

It happens to careful people, and there is no reason for embarrassment. Take these steps in order:

  1. Stop communicating with the caller or chat. Hang up.
  2. If you allowed remote access, disconnect from the internet and uninstall the remote-access program. Then get help from a trusted person or a reputable local repair service.
  3. If you paid by card, contact your bank or card provider promptly, explain what happened and ask about disputing the charge. If you paid with gift cards or a transfer, contact the issuer or your bank right away, although recovery may be difficult.
  4. Change passwords for important accounts, starting with email and banking, using a different device that you know is clean.
  5. Run a full scan with your security software and check for programs you do not recognize.
  6. Watch your statements and accounts for unfamiliar activity, and be alert to later calls from people who claim to help you recover your money. Follow-up approaches are common. Our guides on hacked account response and online scams cover more of the next steps.

Report the incident to your local consumer protection or fraud reporting service, which varies by country. If you feel threatened or believe you are in danger, contact your local police or emergency services.

Helping others

Older relatives and less experienced users are frequent targets, and senior scams often begin with exactly this kind of alert. A calm conversation beforehand helps more than a lecture afterward. Agree on a simple rule: if a screen says you must call someone, close it and ask a trusted person first.

Prevention in brief

  • Keep your browser and system updated.
  • Keep the pop-up blocker enabled.
  • Install software only from official sources.
  • Do not click ads or links in unexpected messages.
  • Remember that no website can detect viruses on your device from a browser tab.

These steps do not guarantee that you will never see a fake alert, but they make you much less likely to be fooled by one. This article offers general information, not professional technical support.

The complete guide to safe browsing and downloads

Safe Web Browsing Habits for Everyday Users
Read the guide

Keep exploring

Guides from other topics

All topics →