Tech Support Scam Pop-Ups: What to Do Right Now

The screen suddenly fills with a red warning. An alarm sound plays. The message says your computer is infected, your files are at risk and you must call “Microsoft Support” at the number shown, right now. The browser won’t close, and the mouse seems stuck.

Take a breath. This is almost certainly a tech support scam, and the pop-up itself usually can’t hurt your computer. The danger starts when you call the number, let someone connect to your machine or pay them. This guide shows you how to close the warning safely and what to do if you already took the bait.

How to tell a fake virus warning from a real one

Real security software and real operating systems don’t behave like these pop-ups. Microsoft’s own support page states plainly that “Microsoft error and warning messages never include phone numbers.” The FTC adds that legitimate tech companies won’t contact you by phone, email or text about a problem with your computer.

Common signs of a fake warning:

• A phone number to call. This is the biggest giveaway. Real warnings never ask you to phone anyone.
• Full-screen lock. The page takes over the browser, hides the address bar or keeps reopening when you try to close it.
• Alarms, countdowns or a robotic voice. Pressure tactics designed to stop you thinking.
• Big brand logos. Microsoft, Apple, Windows Defender, Norton or McAfee branding pasted onto a web page.
• Threats. Claims that your accounts were hacked, your IP address is linked to a crime or your computer will be “disabled.”

The FTC also warns that some scammers buy search ads, so a fake “support” number may appear when you search for help with a real product. And a related version arrives as an email or text claiming you were charged for an expensive subscription renewal, often naming Geek Squad, McAfee or Norton, with a short deadline to call and “cancel.”

Key takeaway: A real security alert never asks you to call a phone number. If a warning on your screen shows a number, treat it as a scam and close it without calling.

How to close a scam pop-up safely

Don’t click anything inside the warning, including buttons that say “OK,” “Cancel” or “Close.” Those buttons can be part of the scam page. Use your computer’s own controls instead.

On Windows

1. Press Ctrl + Shift + Esc to open Task Manager.
2. Select your browser (Edge, Chrome or Firefox) and click End task.
3. If Task Manager won’t open, press Alt + F4 a few times, or hold the power button to shut down.
4. When you reopen the browser, don’t restore the previous session if it offers to. That would bring the scam page back.

On a Mac

1. Press Command + Option + Esc to open Force Quit.
2. Select Safari, Chrome or your browser and click Force Quit.
3. Reopen the browser while holding Shift in Safari to stop old windows from reopening, or decline any “restore tabs” prompt.

After it’s closed

• Clear your browser history and cache so the page doesn’t reload from history.
• Check your browser’s extensions and remove anything you don’t recognize.
• Run a full scan with your security software. On Windows, Windows Security is built in.
• Install pending updates for your operating system and browser.

If the pop-up keeps returning after a restart, you may have a malicious extension or adware. Our guide to types of malware explains what you might be dealing with.

What happens if you call the number

Calling is where the scam really begins. The person on the line sounds professional and calm. They usually walk you through these steps:

1. Ask you to install a remote access tool. These are often legitimate programs used by real IT teams, which is why your security software may not flag them.
2. “Find” problems. They open system logs or run commands that look scary but show normal activity, then claim it proves an infection.
3. Sell a fix. A “lifetime protection plan,” a “security license” or a “network repair,” often costing hundreds of dollars.
4. Escalate. Some scripts move into refund scams (“we refunded you too much, please send back the difference”) or hand you to a fake bank or government agent who tells you to move your money somewhere “safe.”

The FTC notes that these scammers ask for payment by gift card, wire transfer, bank transfer, cryptocurrency or payment apps, because that money is hard to get back. Government workers never ask you to withdraw cash, buy gold or move money to “protect” it.

If you gave remote access: a recovery checklist

If someone connected to your computer, act quickly. Work through this list in order.

Microsoft’s guidance matches these steps: uninstall the apps the scammer had you install, run a full scan, install security updates, change passwords and consider resetting the device if fake warnings keep appearing.

Start with your email password. Whoever controls your email can reset almost every other account. Then do banking, shopping and any account where you save payment details. A password manager makes it much easier to create strong, unique passwords quickly, and our guide on how to set up two-factor authentication walks you through the second layer.

If you can’t afford to reset the device yourself, the FTC suggests getting help from the device manufacturer, a trusted repair company or a knowledgeable friend. Find a repair shop through your own search or a store you already use, not a number the scammer gave you.

If you paid or shared financial details

How you paid decides your next call:

• Credit card: Call the issuer, report the charge as fraud and ask for a chargeback. Credit cards usually offer the strongest dispute rights.
• Debit card or bank transfer: Call your bank immediately. Speed matters for stopping transfers.
• Gift cards: Contact the gift card company using the number on the back of the card and ask whether the funds can be frozen. Keep the card and receipt.
• Payment app: Report the transaction inside the app and contact the app’s support.
• Cryptocurrency: Contact the exchange or ATM operator you used. Crypto payments are rarely reversible, but reporting quickly gives you the best chance.

If you shared your Social Security number or bank login, go to IdentityTheft.gov for a recovery plan and consider placing a credit freeze. Our guides on protecting yourself from identity theft and what to do if you got scammed cover the full first-hour checklist by payment method.

Expect follow-up calls. Victims are often contacted again by “recovery agents” who promise to get the money back for a fee. That is a second scam.

How big the problem is

Tech support fraud isn’t a fringe issue. The FBI’s 2025 Internet Crime Report lists tech and customer support scams among the top 3 crime types by losses, with about $2.13 billion reported lost in 2025, up from about $1.46 billion in 2024. People 60 and older reported about $1.04 billion of those losses. The FBI notes that reported figures understate the true picture, because many victims never file a report.

Older adults are frequent targets, but anyone can fall for a convincing pop-up, especially when it appears during a busy workday. If you manage devices for a parent or a small team, a 5-minute talk about “never call a number on a pop-up” is one of the best protections you can give them. Businesses can build this into security awareness training.

Where to start: prevent the next pop-up

1. Keep your browser and operating system updated. Updates close holes that pushy ad networks abuse.
2. Use the browser’s built-in pop-up and site protections. Microsoft notes that Edge can stop pop-up dialog loops on scam pages.
3. Review browser extensions every few months. Remove ones you don’t use.
4. Bookmark real support pages. For help with a product, type the company’s address yourself instead of searching for a phone number.
5. Agree on a family rule. No one calls a number from a pop-up or lets a stranger connect remotely without checking with someone first.
6. Know where to report. Our guide on how to report a scam explains which agency handles what.

Conclusion

A tech support scam pop-up is designed to make you panic, but it can’t do much until you call, click or pay. Close it with Task Manager or Force Quit, scan your device and move on. If you already let someone in, disconnect, remove their software, change passwords from a clean device and call your bank the same day. Then report it at ReportFraud.ftc.gov so the next person is a little safer.

Sources

• FTC Consumer Advice: How to spot, avoid and report tech support scams — warning signs, renewal scams, payment methods and reporting
• FTC Consumer Advice: What to do if you were scammed — steps after giving remote access or passwords
• Microsoft Support: Protect yourself from tech support scams — no phone numbers in Microsoft errors, recovery steps, reporting link
• FBI IC3: 2025 Internet Crime Report — tech support losses for 2025, 2024 and victims 60 and older