Fake Antivirus Scams And How To Spot Tech Support Pop-Ups

You’re browsing a recipe or checking the weather when your screen suddenly fills with a flashing red warning. Your computer is infected, it says, your files are at risk, and you must call this number right now. It may carry a familiar logo and even play an alarm sound. It’s frightening, and that’s exactly the point. Fake antivirus warnings and tech support scams are designed to panic you into acting before you have time to think.

How These Scams Work

Which? describes the pattern clearly. Scammers pretend to be from a well-known technology or security company and claim there’s a problem with your device, such as a virus or an expired software licence. They reach people in a few different ways:

• Pop-ups in your web browser that claim your computer is infected and urge you to call a support number.
• Fake websites made to look like the real thing, sometimes promoted through adverts at the top of search results, offering antivirus downloads or “support”.
• Unexpected phone calls, sometimes backed up by a text message, saying your computer or router has a problem.

Once you’re on the phone, the scammer usually asks you to install screen-sharing software so they can “fix” the problem. That gives them a view of, or control over, your computer. From there they may try to get your bank details, persuade you to pay for a worthless repair or subscription, or even pass you on to a fake bank or police officer.

Some scammers go further to seem believable. Which? warns that they may use details gathered from data breaches and social media, mentioning the make of your computer, your address or the names of relatives. Phone numbers can also be faked so a call appears to come from a real company. Knowing a few personal details doesn’t make a caller genuine.

Warning Signs Of A Fake

These scams can look convincing, but they share some tell-tale features.

• Urgency and alarm. Flashing text, countdown timers, sirens and warnings that your data will be lost unless you act immediately.
• A phone number to call. Which?’s advice is blunt: if a pop-up asks you to call a number, even if it looks like it’s from a big technology company, it’s a scam.
• A warning inside your web browser. If the alert appeared while you were on a website, it’s coming from that website, not from your computer’s own security software.
• Requests for remote access or payment. A genuine company won’t ring you out of the blue and ask to take control of your computer.
• A web address that isn’t quite right. Lookalike sites often use addresses with extra words, odd spellings or unusual endings. If you’re buying or downloading security software, go directly to the maker’s official website by typing the address yourself, rather than clicking an advert.

How To Close A Scam Pop-Up Safely

Don’t click anything inside the pop-up, including buttons marked “Close” or “Cancel”, as these can be part of the scam. Which? suggests closing your whole browser instead:

1. On a Windows computer, press Ctrl + Alt + Delete and choose Task Manager.
2. Find your web browser in the list, select it and click End task.
3. When you reopen your browser, don’t let it restore your previous tabs, or the scam page may load again.

Stopping Pop-Ups Coming Back

Many pop-ups appear because a dodgy website was once given permission to send notifications. You can switch these off in your browser’s settings, usually under privacy or site permissions, then notifications. If pop-ups keep appearing even with your browser closed, check your list of installed programs for anything you don’t recognise.

What To Do If You’ve Already Called Or Given Access

Scammers are skilled and persuasive, and anyone can be caught out. If it’s happened to you, act quickly and don’t feel embarrassed.

• End the call and disconnect your computer from the internet if the scammer had remote access.
• Contact your bank straight away if you shared card or bank details, or if money has left your account. Which? notes that you may be able to get your money back.
• Check your computer. The NCSC suggests running a full antivirus scan and following its recommendations. If the problem can’t be cleaned up, the device may need to be wiped and reinstalled. The NCSC’s guide to recovering an infected device takes you through it.
• Change your passwords, starting with email and banking, using a different device if you can. Our guide to strong passwords for the whole household can help.

How To Report Fake Websites And Scams

Reporting helps protect other people, and it’s free and quick.

• Suspicious websites: report a scam website to the NCSC. It says it acts on every report, which can include working with hosting companies to take malicious sites down, although it can’t tell you the outcome.
• Suspicious text messages: forward them to 7726.
• If you’ve lost money or been hacked: in England, Wales and Northern Ireland, report it to Report Fraud (the service that replaced Action Fraud) at reportfraud.police.uk or on 0300 123 2040. In Scotland, call Police Scotland on 101.

Quick Checklist

• Never call a number shown in a pop-up warning.
• Never let anyone who contacts you out of the blue access your computer.
• Close scam pop-ups with Task Manager, not the buttons on screen.
• Download security software only from the maker’s official website.
• Keep your computer and browser updated.
• Report suspicious websites to the NCSC and fraud to Report Fraud or Police Scotland.

Scam pages don’t only appear at home. If you use Wi-Fi in cafes and hotels, our guide to staying safe on public Wi-Fi covers the extra precautions worth taking. It’s also worth sharing these tips with older relatives.

If you found this useful, there’s plenty more everyday advice for the home over at Beyond The Garden Gates.

Kaan Rassad

See Full Bio