A pop-up locks your screen with a loud warning, or the phone rings and someone says they're from Microsoft. Either way, your first instinct is panic — your files, your photos, your bank logins. But real tech companies do not detect your viruses for you and then call to tell you about it. This is always a scam.

"Microsoft Windows Defender: 5 viruses detected on your PC. Call this number immediately for remote support: 1-888-555-0165"

Why this scam works

The pop-up is designed to feel unclosable — a full-screen browser alert with a fake countdown or a system alarm sound. Panic pushes people to call the number before they stop to think. Once you call, the "technician" walks you into installing remote-access software like TeamViewer or AnyDesk — and now they're inside your computer, not fixing it.

5 signs it's fake

What to do instead

  1. Do not call the number or click anything in the pop-up
  2. Close it via Task Manager (Windows) or Force Quit (Mac) — not the fake "X" button
  3. If you already gave remote access, disconnect from the internet and run a real antivirus scan, then change your passwords from a different device
  4. Paste the message or call transcript into ScamCheck for a free risk score

Pop-ups are not your operating system

A full-screen browser page can look like Windows or macOS. It is still just a website. Real OS alerts do not list a random toll-free number to “Microsoft Support” and demand you call before you can close the window.

If you already gave remote access

  1. Disconnect from the internet if you can do so safely
  2. Uninstall remote tools you did not intend to keep (TeamViewer, AnyDesk, etc.)
  3. Change passwords for email and banking from a different device
  4. Call your bank if you shared card data or allowed “refund” theater
  5. Consider a local trusted technician for a clean checkup

FAQ