PanicStation.org
UK USA
us Technology & digital loss

What to do if…
your device shows a fake virus warning pop-up that tells you to call a number

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy USA guide

Short answer

Do not call the number or click anything in the pop-up. Close the tab, window, or app, then use trusted security tools and official reporting routes if you shared money, passwords, card details, identity information, or remote access.

Do not do these things

  • Do not call the number, scan the QR code, or use any support link shown in the pop-up.
  • Do not install remote-access software because the pop-up or caller tells you to.
  • Do not enter passwords, security codes, bank details, card details, or Social Security information into anything connected to the pop-up.
  • Do not pay for “support” with gift cards, cryptocurrency, wire transfer, payment apps, cash pickup, or a “verification” charge.
  • Do not keep clicking buttons inside the warning to prove whether it is real.
  • Do not trust a caller, text, email, or website just because it uses the name of a well-known technology company.

What to do now

  1. Close the pop-up without using its instructions.

    • On a computer, close the tab or browser window. If it appears stuck, press Esc to leave full-screen mode, then close the browser.
    • If the browser will not close, force-quit it: on Windows, use Ctrl+Shift+Esc and end the browser task; on Mac, use Option+Command+Esc and force-quit the browser.
    • On a phone or tablet, close the browser or app from the app switcher. If it keeps returning, restart the device.

  2. Stop the same page from coming back.

    • Reopen the browser without restoring the suspicious tab if your browser asks.
    • Remove any unfamiliar browser extension, add-on, or recently installed app.
    • Check browser site permissions and turn off any suspicious Notifications permission, especially if you clicked Allow.
    • If you can identify the suspicious site, remove that site’s recent data or permission rather than clicking anything on the warning page.

  3. Run a trusted security check.

    • Update your browser, operating system, and security app from their normal settings or official app store.
    • Run a full scan using your installed antivirus, built-in security protection, or another reputable security tool you already trust.
    • Follow only the security tool’s own results, not instructions from the pop-up.

  4. If you called the number or let someone connect remotely, contain the risk.

    • Disconnect that device from the internet by turning off Wi-Fi or unplugging the network cable.
    • From a different trusted device, change your email password first, then banking, shopping, cloud, and other important account passwords.
    • Turn on multi-factor authentication where available.
    • Remove any remote-access app the caller told you to install.
    • If remote access happened, a professional device cleanup or reset may be safest before you use the device again for banking, email, or sensitive accounts.

  5. If you paid or entered financial details, contact money providers now.

    • Call your bank, card issuer, payment app, or wire-transfer provider using the number on your card, statement, or official website.
    • Ask about fraud steps, charge disputes, account locks, replacement cards, and monitoring for new transactions.
    • If you shared identity information, use official identity-theft recovery resources and consider placing fraud alerts or credit freezes.

  6. Report it through official USA channels.

    • Report the scam to the Federal Trade Commission at ReportFraud.ftc.gov.
    • If you lost money, gave remote access, or shared sensitive information, also report it to the FBI’s Internet Crime Complaint Center at ic3.gov.
    • Type official addresses directly into the browser rather than following links from the pop-up or from a caller.

What can wait

  • You do not need to decide right now whether the pop-up was a real infection or a fake warning before closing it and checking the device.
  • You do not need to buy new security software from a pop-up, caller, or urgent ad.
  • You do not need to replace the device immediately.
  • You do not need to file every possible report before protecting your accounts and payment methods.

Important reassurance

These warnings are designed to create panic and make you call quickly. A pop-up with a phone number is commonly a scam tactic, and closing it, checking permissions, scanning with trusted tools, and protecting accounts are reasonable first steps.

Scope note

These are first steps to stop interacting with the scam, reduce account and money risk, and use official reporting routes. Later decisions about refunds, identity protection, device repair, or a reset may need help from your bank, a trusted technician, or another specialist.

Important note

This is general information, not legal, financial, cybersecurity, or professional advice. For money loss, account takeover, identity theft, or device compromise, use official reporting routes and contact the relevant financial institution or trusted professional promptly.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us