The Tech Support Popup Scam: What It Looks Like and What to Do

You're browsing normally when suddenly your screen fills with flashing red warnings. An alarm blares. A robotic voice says your computer is infected and your bank passwords are being stolen. The screen says to call Microsoft right away, and warns you not to shut down.

It looks terrifying. It's also completely fake. Your computer isn't infected — you just landed on a malicious webpage.

How the scam works

These popups are just webpages. A bad ad or a mistyped web address sends you to a page built to look like a system alert. It jumps to full-screen mode, hides your mouse cursor, plays siren sounds, and shows fake scan results. Nothing on it is real — not the "virus," not the "scan," and definitely not the phone number.

The page says "do not shut down" because shutting down (or just closing the browser) instantly ends the whole show. The scammers need you frozen in place long enough to call.

If you call, a fake "Microsoft technician" answers. They ask to connect to your computer with remote-access software, run scripts that display harmless text dressed up as scary evidence, then charge you hundreds of dollars to "fix" a problem that never existed. Worse, some quietly install real spyware, dig through your files, or open your banking site while they have control. Others follow up weeks later posing as a "refund department" to run a second scam.

The red flags in the example above

• A phone number in a virus warning. Real Microsoft and Apple alerts never include a phone number. This one detail exposes the scam by itself.
• "Do not shut down your computer." Real security software never says this. Scammers say it because restarting kills the fake alert.
• Sirens, flashing text, and countdown timers. Actual system messages are quiet and boring.
• It appeared while you were browsing. Real antivirus warnings come from your antivirus program, not from a webpage.
• Claims your passwords are "being transmitted." A webpage can't scan your computer. It's a scare script, identical for every visitor.

What to do

1. Don't call the number. There is no infection and no Microsoft on the other end.
2. Close the page. On Windows, press Ctrl+Alt+Delete, open Task Manager, select your browser, and click End Task. On a Mac, press Option+Command+Esc and force-quit the browser. If all else fails, hold the power button and restart — despite what the popup says, that's completely safe.
3. Don't restore tabs. When the browser reopens and offers to restore your last session, decline, or the popup comes right back.
4. Run a real scan for peace of mind. Windows Security (built into Windows) or your Mac's built-in protections are enough. You'll almost certainly find nothing, because the popup was just a webpage.

If you already called or paid

1. If they connected to your computer: disconnect from the internet, uninstall their remote-access program, restart, and run a full Windows Security scan. Change your email and banking passwords from another device.
2. If you paid by card: call your bank, report the charge as fraud, and ask for a new card.
3. If you paid by gift card or wire: contact the gift card company or your bank immediately, then report it at reportfraud.ftc.gov.
4. Expect follow-up calls. Scammers resell victim lists. Anyone who calls later offering a "refund" for the tech support fee is running round two. Hang up.

These pages are engineered by professionals to trigger pure panic, and they fool people who've used computers for decades. The fix is knowing one simple fact: a real virus warning never asks you to call anyone.