Online Safety · 6 min read
Fake Virus Warnings and Tech Support Scams: How to React
A full-screen warning with a phone number is not your antivirus. Real security software never asks you to call anyone.
Published 2026-08-09 · Last updated 2026-08-09
How to recognise a fake alert
It appears inside a browser window, uses countdown timers and alarm sounds, imitates Microsoft or a known antivirus brand, blocks normal navigation, and always provides a support telephone number.
- A phone number in a security alert means it is a scam, without exception
- Real Windows and antivirus alerts appear as system notifications, not full-screen web pages
- Genuine alerts never demand immediate payment to unlock a device
Closing a locked page safely
Open Task Manager and end the browser process, or disconnect from the network and close the window. When restarting the browser, decline to restore the previous session — that would reload the scam page.
If you already called them
Nothing bad happens from a call alone. If you granted remote access, disconnect the machine from the internet, uninstall the remote-access tool they installed, run full scans, and change passwords from a different device.
If you paid
Contact your bank or card issuer immediately and report the transaction as fraud. Report the incident to the FTC at reportfraud.ftc.gov. Expect a follow-up 'refund' call — recovery scams target previous victims.
Preventing repeats
Enable browser pop-up and scam-site protection, revoke website notification permissions you did not intend to grant, and keep an ad blocker or web-protection module active — most of these pages arrive through malicious advertising.
Frequently asked questions
- Does a fake alert mean I am infected?
- Usually not. It is a web page. If it keeps returning without a browser open, then look for adware.
- Can they do damage from a remote session?
- Yes — they install remote tools, disable security software and access online banking. Treat any remote session with a scammer as a full compromise.