Fake Virus Warnings and Tech Support Scams: What to Do

Nov 5, 2026 · 4 minute read · By IsSiteLegit

If a pop-up says your computer is infected and tells you to call a number, do not call. Close the browser tab or restart the device. If someone has already phoned you about a "virus", hang up. Real companies do not contact you this way.

What these scams look like

A tech support scam starts with fear. You see a loud, official-looking warning. It may flash, play an alarm sound, or fill the whole screen. It says your computer is locked, hacked or full of viruses. It tells you to call a phone number right away.

Other versions start with a phone call or an email. The caller says they work for "Microsoft", "Apple" or your internet provider. They say they have seen a problem on your computer.

The goal is always the same: get you talking to a stranger who then asks for money or control of your device.

What Microsoft and Apple really do

The big technology companies do not work the way these scams pretend.

• They do not put phone numbers in browser warnings telling you to call about a virus.
• They do not phone you out of the blue to say your computer is infected.
• They do not ask you to pay by gift card, bank transfer or cryptocurrency to fix a problem.
• They do not lock your browser and demand you call.

Your device's own security tools, such as Windows Security or the Apple system settings, work quietly on your own computer. If you want to check your device, open those tools yourself. Do not use a number or link from a pop-up.

Why a web page cannot know your computer is infected

A website cannot scan your computer. A browser keeps pages in a sealed space for exactly this reason. So when a page claims it "found 5 viruses", it is making that up. The page is a picture designed to look like a system alert.

The scary full-screen look is a trick too. Pages can ask your browser to go full screen, which hides the address bar and makes the warning feel like part of your system.

What to do if you see a fake warning

1. Do not call the number and do not click anything inside the pop-up, even the "Close" or "Cancel" buttons.
2. Try to leave full screen. On most computers, press Esc. On Windows you can also try Alt+F4, and on a Mac, Command+Q.
3. Close the browser. If it will not close, restart the computer. If the browser offers to restore your last tabs, choose not to.
4. Clear your browser's recent history and remove any extensions you do not recognize.
5. Run a scan with the security tool already built into your device.

If a caller asks for remote access

Remote access software lets another person see and control your screen. Scammers use it to "show" you fake problems, steal files, open your online banking, or install harmful programs.

A simple rule helps: never let someone who contacted you first connect to your computer. If you did not start the call, end it. If you are not sure, hang up and find the company's number yourself from its real website or a bill. Do not use a number the caller gives you.

Watch for these signs:

• Pressure to act quickly.
• A request to install a program or type a code you are given.
• A request to keep the call secret from family or your bank.
• Any request for payment in gift cards, wire transfers or crypto.

Why the bad pages are hard to spot by address alone

Fake warnings are often hosted on ordinary sites. In the malware links listed by public security feeds on 2026-11-05, 19,613 pointed to raw.githubusercontent.com, a widely used developer file host. That does not make the host itself bad. It shows that bad content can sit on well-known services, so a familiar name in an address is not proof of safety.

In the same feeds on that date, 58% of the 300 phishing links used free hosting platforms such as pages.dev. Again, the platforms are normal services. Scammers simply like cheap, quick places to publish.

What a check can and can't tell you

If a pop-up came from a site you do not know, or you were sent a link, you can look at it before you click. Our guide on checking a link before clicking shows how.

A tool like IsSiteLegit looks at public signals such as domain age, security blacklists, look-alike brand names and page content, and it shows its evidence. In the last 7 days, we ran 214 checks. 4 were rated high risk and 22 were rated caution.

But automated checks, including ours, can miss brand-new scam sites. A good result is not a guarantee of safety. If a page tells you to call a number about a virus, treat it as a scam whatever the score says.

If you already paid or clicked

Act quickly, and do not feel embarrassed. This happens to many careful people.

1. Disconnect from the internet if someone had remote access, then shut the computer down.
2. Contact your bank or card company right away. Ask them to block or reverse payments.
3. Change your passwords from a different, clean device. Start with email and banking.
4. Run a full security scan, or ask a trusted repair shop to check the device. Do not use a number from a pop-up.
5. Report it. In the US, use reportfraud.ftc.gov or www.ic3.gov. In the UK, use Action Fraud. In Australia, use Scamwatch.

Our guide on what to do if you paid a scam website has more detail.

If you are unsure about a website, you can check it with IsSiteLegit for free and see the evidence for yourself.

Written with AI from IsSiteLegit's data and published after an automatic fact check: every number in this post comes from that data. Figures from security feeds describe the links listed on the day of the post. Where we link to a website’s IsSiteLegit result, a "likely legit" rating describes what our automated checks found when they ran. It is not an endorsement of the company, its products or its offers. How we write.