A loud alarm, flashing warning or full-screen message says your computer has dozens of viruses. It may display a countdown, claim your bank account is exposed or insist that you call “Microsoft support” immediately. Take a breath. The warning may be scareware—a deceptive page designed to make panic feel like your only option.
Scareware often tries to sell useless software, trick you into downloading real malware or persuade you to give a stranger remote access. Simply seeing a browser warning does not prove the device is infected. The greatest danger usually begins when you click, call, install, pay or share information.
What is scareware and how does it work?
Scareware uses fear and urgency to push you into an unsafe action. It can arrive through a malicious advertisement, mistyped address, search result, compromised website or browser notification you previously allowed.
The FTC says tech-support scams often begin with a bogus warning that looks like it came from a well-known company. If you call, the scammer may request remote access, pretend to scan the computer and “find” a problem that does not exist. The goal is money, personal information or control of your device.
How can you tell a virus warning is fake?
Real security tools can warn you about threats, so focus on where the message appears and what it asks you to do. Common scareware signs include:
- A phone number inside a browser pop-up or security warning
- Pressure to act immediately or a countdown timer
- Loud alarms, robotic voices or flashing full-screen graphics
- Claims that hundreds of threats were found instantly
- A demand to install unfamiliar cleanup or remote-access software
- Requests for gift cards, cryptocurrency, wire transfers or bank access
- Warnings that closing the page will destroy files or trigger legal trouble
- A familiar company logo paired with a strange website address
The FTC warns that security pop-ups telling you to call tech support are scams. Do not trust the phone number, even if the page uses the name or logo of Microsoft, Apple or a security company.
What should you do when scareware appears?
- Do not interact with the page. Do not click Scan, Allow, Cancel, Download or a button drawn inside the warning.
- Do not call the number. Never grant remote access or share a password, verification code or payment detail.
- Exit full-screen mode. Press Esc or F11 when appropriate, then try closing the browser tab or window normally.
- Force-close the browser if needed. On Windows, press Ctrl+Shift+Esc—or Ctrl+Alt+Delete and open Task Manager—select the browser and choose End task. On macOS, press Command+Option+Esc and force-quit the browser.
- Do not restore the previous session. Reopening all old tabs may reload the scareware page.
- Run a trusted scan. Update trusted security software already installed on the device and run its full scan.
A hard shutdown is a last resort when the browser and system controls will not respond—not the first step. Holding the power button can cause unsaved work or file damage. Try normal closing and force-quit tools before cutting power.
How do you stop fake virus alerts from coming back?
Recurring alerts may come from browser permissions rather than installed malware. Work through these cleanup steps:
- Remove suspicious notification permissions: Open the browser’s site or notification settings and block websites you do not recognize.
- Clear site data: Delete cookies and cached files associated with the suspicious page.
- Review extensions: Remove browser add-ons you did not intentionally install.
- Block pop-ups and redirects: Confirm the browser’s built-in protection remains enabled.
- Update everything: Install current browser, operating-system and security-software updates.
- Scan again: If the alerts continue outside the browser, run another trusted scan or consult a reputable professional.
Microsoft’s Edge Scareware Blocker detects suspicious full-screen behavior, silences alarms and offers a route back to safety. Microsoft recommends combining it with Defender SmartScreen and keeping Edge current.
What if you downloaded or installed something?
Disconnect the device from the internet if suspicious software is running or a stranger has remote access. Use a trusted device to change your primary email password, then change financial and other important account passwords. Enable multifactor authentication, uninstall unfamiliar remote-access tools and run a complete security scan. If you cannot confirm the device is clean, get help from a trusted technician whose contact information you found independently.
What if you paid the scammer or shared financial information?
Contact the bank or card issuer immediately through the number on your card or official app. Explain how you paid, ask whether the transaction can be stopped and replace exposed card or account details. Watch for follow-up scams: criminals may return pretending they can recover your money.
The financial harm is enormous. The FBI’s latest reporting shows tech-support scams caused about $2.1 billion in reported losses in 2025. The FBI advises victims to scan the computer, contact financial institutions, change passwords and report the incident to IC3.
How can you prevent scareware?
- Keep the browser, operating system and security software updated.
- Download apps only from official stores or verified vendor sites.
- Reject notification requests from unfamiliar websites.
- Avoid sponsored support numbers and unexpected security-renewal messages.
- Back up important files so threats about losing everything carry less power.
- Teach family members that legitimate support will not demand remote access or urgent payment from a surprise pop-up.
Recognizing scareware makes you safer by interrupting the scam before fear turns into a download, payment or stolen account. Your strongest move is not technical: pause, close the warning through trusted controls and verify any concern using security software you opened yourself.
Take five minutes today to review browser notification permissions and confirm your security software is current. Then share one rule with your household: never call a phone number displayed in a virus pop-up.
