Tech Support Pop-Up Scams

You are browsing normally when the screen fills with a red warning. An alarm sounds. A voice says your computer is infected, your data is at risk, and you must call support immediately. The browser seems frozen. It looks official and terrifying. It is a web page, and it is a scam.

What these pop-ups are

Tech support pop-ups, sometimes called scareware, are web pages built to look like system alerts from Microsoft, Apple, Google or antivirus companies. They appear through malicious adverts, mistyped web addresses, or links in emails and messages. They often:

• go full screen and play alarms or recorded voices
• show fake scans finding hundreds of "threats"
• claim your computer is "locked" or "blocked"
• display a phone number for "certified technicians"
• make the browser hard to close

What happens if you call

1. A friendly "technician" asks you to install a remote access app so they can "check" your computer.
2. They show you normal system logs and claim they prove infection.
3. They sell you a "repair" or "protection plan", often hundreds of dollars.
4. They may access your files, install malware, or watch you log in to your bank.
5. Some follow up with a refund scam weeks later.

How to close a scareware pop-up

1. Do not call the number or click anything on the page, including "close" buttons inside it.
2. Close the browser tab or window normally.
3. If it will not close, force the browser to quit:
   • Windows: press Ctrl + Shift + Esc to open Task Manager, select the browser, and choose End task.
   • Mac: press Command + Option + Esc and force quit the browser.
   • Phone: close the browser app from the app switcher.
4. When you reopen the browser, do not restore the previous session if it offers to.
5. Clear your browsing data if the page keeps coming back, and check for unwanted browser extensions.

Preventing pop-ups

• Keep your browser and operating system updated.
• Use the browser's built-in pop-up blocking and safe browsing features.
• Be careful with links in ads, and type important addresses yourself.
• Remove browser extensions you do not recognise.
• Block notifications from sites you do not trust. See browser notification scams.

If you already called

Hang up, disconnect from the internet, and follow our step-by-step guide on what to do after giving a scammer remote access. If you paid, contact your bank immediately.

For how to recognise real warnings, see real vs fake security warnings. For the phone version of this scam, see fake IT support calls. For the bigger picture of how online scams work, read our complete guide.

Frequently asked questions

Sources

1. How To Spot, Avoid, and Report Tech Support Scams, US Federal Trade Commission
2. Malware: How To Protect Against, Detect, and Remove It, US Federal Trade Commission
3. Device security guidance, UK National Cyber Security Centre