Fake Security Warnings in Email
Emails warning of viruses, hacked accounts or expiring antivirus push you to download "fixes" or call fake support. How fake security emails work and how to check real alerts.
Fear is a powerful lure. Emails warning that your device is infected, your account has been hacked, or your antivirus has expired push people to click, download or call without thinking. The "fix" is the attack.
Common fake security emails
- "Virus detected on your device. Download the removal tool."
- "Your antivirus subscription has expired. Renew now to stay protected." See fake renewal scams.
- "Suspicious sign-in detected. Secure your account here."
- "We have recorded you through your webcam. Pay or we will share it." See sextortion.
What they want
- You to download malware disguised as a fix.
- You to call a number and allow remote access. See callback phishing.
- Your password, through a fake "secure your account" page.
- A payment, for fake renewals or extortion.
How to check a real alert
- Open your security software or account directly, not through the email.
- Check the account's security or recent activity page.
- Remember that genuine alerts do not ask you to call a number or download a tool from an email.
Never download a "security fix" from an email. Update software through its own settings or official app store.
Got a scary security email? Paste it into CyberWatch AI Scan for a free check.
Related: real vs fake security warnings. For more, see how phishing works in our complete guide.
Frequently asked questions
Would my antivirus company email me about a virus?
Genuine security software shows alerts inside the program on your device. Emails asking you to download a fix or call a number are almost always scams.
The email says my account was hacked and includes a link to secure it. Is that real?
It might be real or fake. Do not use the link; open the account yourself and check its security page.
What about emails claiming a hacker has my webcam footage?
These are extortion bluffs sent to many people, sometimes quoting an old leaked password. Do not pay; change that password.
Sources
- How To Spot, Avoid, and Report Tech Support Scams, US Federal Trade Commission
- Suspicious email actions, UK National Cyber Security Centre
- Malware: How To Protect Against, Detect, and Remove It, US Federal Trade Commission
