Protect yourself from scams

Tech support scams: fake virus pop-ups and "Microsoft" calls

Microsoft, Apple and real antivirus companies never put a phone number in a warning pop-up or call you out of the blue. If a screen tells you to call for help, it is a scam: close the browser and do not call.

By the editors of ProtectYour.com Last reviewed 5 min read

Affiliate disclosure: this guide links to Bitdefender. If you sign up through those links we may earn a commission, at no extra cost to you, and that does not change what we recommend. Free options come first, and we say where a competitor is the better fit. How we make money

Key takeaways

  • A pop-up or call saying your computer is infected and you must call a number is a scam. Microsoft and Apple do not do this.
  • Close the browser tab (force quit if it will not close). The pop-up itself cannot harm your computer.
  • Never let a stranger who contacted you install remote access software on your computer.
  • The FBI received complaints of $2.13 billion lost to tech and customer support scams in 2025.
  • If you let them in or paid, disconnect, call your bank, change passwords from another device and report it.

How a tech support scam works

It starts in one of three ways:

  • A pop-up fills your browser, often with an alarm sound, a Microsoft or Apple logo, and a message saying your computer is infected or locked and you must call a support number right now.
  • A phone call from someone claiming to be from Microsoft, Apple, your internet provider or an antivirus company, saying they have detected a problem.
  • An email or text about a renewal charge for antivirus or a subscription you never bought, with a number to call to cancel or get a refund.

Once you are on the phone, the “technician” asks you to install a remote access tool so they can fix things. Then they show you scary-looking but normal system screens as proof of infection, and sell you a repair or a protection plan. In the newer, more expensive version, they claim your bank account has been hacked and pass you to a fake bank or government agent who tells you to move your savings.

How much these scams cost

The FBI’s Internet Crime Complaint Center received 47,794 complaints about tech and customer support scams in 2025, with $2,134,675,818 in reported losses, up from $1,464,755,976 in 2024 (2025 IC3 Annual Report). The FTC separately received 69,221 tech support scam reports in 2024 (FTC Data Book 2024).

Older adults are hit hardest. The FTC found that among people 60 and over who lost $10,000 or more to a business or government imposter in 2024, many reported that it started with an online pop-up, typically a fake Microsoft or Apple security alert with a phone number (FTC Data Spotlight, August 2025).

The tells

  • A security warning with a phone number in it. Real warnings from Windows, macOS or your antivirus do not list one.
  • Someone contacted you first about a problem with your computer.
  • They want remote access to your computer, or ask you to log in to your bank while they watch.
  • They want payment by gift card, wire, cryptocurrency or a Bitcoin ATM.
  • They say they accidentally refunded you too much and need you to send the difference back.

Free step: closing a scary pop-up

Do not click anything inside the pop-up, including its “close” button. On Windows, press Ctrl+Shift+Esc to open Task Manager and end the browser. On a Mac, press Command+Option+Esc and force quit the browser. When you reopen it, do not restore the previous tabs.

If you need real help, start from a number you find yourself: Microsoft’s and Apple’s own support websites, the manufacturer of your computer, or a local repair shop you chose.

Making it less likely to happen

  • Keep your browser and operating system updated, so the browser’s own protections against deceptive sites stay current. See keeping your devices updated.
  • Turn on the built-in protection: Microsoft Defender SmartScreen on Windows, and Safe Browsing in Chrome or fraudulent website warnings in Safari. Our Windows and Mac checklists show where.
  • Talk to older relatives about the one rule that stops this scam: a screen that tells you to call a number is lying.

Paid security suites add web filtering that blocks many known scam pages before they load. That is the main reason to pay; Windows’ built-in Defender already handles malware well (see is free antivirus enough).

If you let them in or paid

  1. Disconnect the computer from the internet (turn off Wi-Fi or unplug the cable) and uninstall any remote access program they had you install.
  2. Call your bank and card issuer on the numbers on your cards. Dispute card charges and ask them to stop any transfers. If you paid by gift card, call the card’s issuer; for crypto, contact the exchange or ATM operator.
  3. Change passwords from another device, starting with email and banking, and turn on two-factor authentication.
  4. Run a full scan with your security software, or have a repair shop you trust check the computer. If they had long access, a reset of the computer is the safest fix.
  5. Report it at ReportFraud.ftc.gov and IC3.gov. If they saw your Social Security number or ID, use IdentityTheft.gov.

They may call back

Tech support scammers often call victims again, offering a refund that turns into another “overpayment” con, or posing as a company that can recover your money for a fee. Do not engage.

This is general information, not legal or financial advice.

Common questions

Does Microsoft ever call you about a virus?

No. Microsoft does not make unsolicited calls about computer problems, and its error and warning messages never include a phone number to call. Anyone who calls claiming to be Microsoft support is a scammer.

Can a pop-up saying my computer is infected harm my computer?

A browser pop-up on its own usually cannot. It is a web page designed to scare you into calling. Close the browser with Task Manager on Windows or Force Quit on a Mac, and do not call the number or click inside the pop-up.

What should I do if I gave a scammer remote access to my computer?

Disconnect from the internet, uninstall the remote access program, call your bank, change your email and banking passwords from another device, scan or reset the computer, and report it at ReportFraud.ftc.gov and IC3.gov.

How much do people lose to tech support scams?

The FBI's IC3 received 47,794 tech and customer support scam complaints in 2025, with $2,134,675,818 in reported losses, up from $1,464,755,976 in 2024.

Your next step

Take the 5-minute self-checkTen questions, a score, and the free fix for each gap. Your answers never leave your browser.

If you want a paid toolAffiliate link

Bitdefender

Best for: Windows, Mac and Android users who want web protection, ransomware layers and several devices covered by one subscription.

Not for: Windows users happy with Microsoft Defender, and iPhone users: iOS apps cannot scan other apps, so the benefit there is mostly web filtering.

Visit Bitdefender

Related guides