If This Type of Alert Pops Up, Don’t Click on It!

Your screen suddenly fills with a flashing red warning. An alarm sound plays. “Your computer is infected! Call Microsoft Support immediately at this number.” Stop. Do not call, do not click and do not panic.

This is a tech support scam, one of the most common frauds targeting both home users and employees. The pop-up is just a web page designed to look like a system warning. Your computer is almost certainly fine. The only real danger is what happens if you call the number.

The FTC’s guide on how to spot, avoid and report tech support scams puts it simply: real security pop-up warnings and messages will never ask you to call a phone number.

How the scam works

From pop-up to empty bank account

The fake alert usually appears after clicking a bad search result, a malicious ad or a mistyped web address. It may go full screen, block the back button and play audio to make you feel trapped. The number connects you to a call center where a friendly “technician” asks you to install remote access software so they can “take a look.”

Once connected, they show you normal system logs and call them proof of infection, then ask for payment. In worse versions, they ask you to log in to your bank “to process a refund,” then claim they accidentally refunded too much and pressure you to send the difference back by wire, gift card or cryptocurrency. Meanwhile, they may install their own tools so they can return later.

Microsoft, Apple and your bank will never put a phone number in a pop-up and ask you to call.

The variations to know

• The pop-up: A browser page posing as Windows, Apple or antivirus alerts, with a phone number.
• The cold call: Someone claiming to be from Microsoft, Apple or your internet provider says they detected a problem on your computer.
• The fake renewal email: An invoice for a security subscription you never bought, with a number to call to “cancel.”
• The bank or government escalation: After the tech support call, a second scammer poses as your bank or a federal agent and tells you to move your money to a “safe” account.
• Search ads: Fake support numbers placed at the top of search results for real companies.

What to do if a fake alert appears

• Do not call the number or click anything inside the warning.
• Close the browser tab. If it will not close, press Ctrl+Shift+Esc on Windows to open Task Manager and end the browser, or use Force Quit (Cmd+Option+Esc) on a Mac.
• Reopen the browser carefully. If it offers to restore the previous session, decline.
• Run a scan with your normal security software if you want peace of mind.
• At work, tell IT so they can check the machine and block the site.

Already let someone connect? Disconnect from the internet, uninstall any remote access tool they installed, change passwords from a different device, call your bank’s fraud line using the number on your card, and have the computer checked. Act quickly; there is no shame in being targeted by professionals.

A realistic scenario

The refund that was never a refund

Picture a retired teacher checking the weather when her screen locks up with a siren and a “Windows Defender” warning. She calls the number. A patient man walks her through installing a remote access app, shows her “hundreds of errors” and says she qualifies for a refund of an old support plan. He asks her to log in to her bank so he can deposit it.

Moments later he says he mistyped and sent $9,000 instead of $900. Her balance even looks higher, because he quietly moved money from her savings to checking. He begs her to fix his mistake with a wire transfer before he loses his job. None of it was real, and the money she sends is gone within the hour. The moment to stop was the first one: no real warning ever asks you to call.

If you already called or gave access

• Disconnect from the internet right away and do not let the caller back in.
• Uninstall the remote access software they asked you to install, and have a trusted technician check the computer.
• Call your bank and card companies using the number on the back of your card, report the fraud and ask to reverse or block payments.
• Change passwords for email, banking and any account you used during the call, from a different, clean device.
• Report it at ReportFraud.ftc.gov, and at ic3.gov if money was lost.

How legitimate support actually works

It helps to know what real help looks like. Microsoft and Apple do not monitor your computer for infections and call you about them. Real security software shows alerts inside its own app, not in a web page with a phone number. When you need support, you start the contact yourself, by typing the company’s address into your browser or using the number on your device’s packaging or your account page, never a number from a pop-up, an ad or an unexpected email.

For a business, the rule is even simpler: employees should call their own IT provider, and no one else, for any computer problem.

Protect the people around you

Older relatives are frequent targets, but these scams catch busy professionals too, often on a work laptop. Share one sentence with everyone you care about: Microsoft, Apple and your bank will never put a phone number in a pop-up and ask you to call. Keep browsers updated, use an ad blocker from a reputable developer, and remember that the same instincts that stop phishing emails work here: urgency plus an unusual request equals stop and verify.