What Should I Do If My Computer Says “You Have a Virus”? Is It a Scam?
A pop-up saying “You have a virus” is often a browser scam, especially when it demands an immediate phone call, payment, download, or remote access. Do not call the number or click its buttons. Close the page safely, open Windows Security yourself, and scan using a trusted security tool. A pop-up alone does not prove infection.
STOP — Do not call the number on the pop-up
Scareware uses urgent colors, loud audio, fake scan results, countdowns, and a phone number to pressure you into acting before you can think. The person who answers may ask for payment, a password, a verification code, or remote-control access. The warning is not a trusted way to contact Microsoft, your antivirus company, or your bank.
Close the browser window or tab without calling, paying, downloading, or granting permission. If the page will not close, use the browser’s normal close controls or end the browser process through Task Manager. Do not restart by holding the power button unless the computer is frozen and normal options are unavailable.
- Do not call the displayed phone number.
- Do not click “remove virus,” “renew,” or “scan now” buttons.
- Do not download the program recommended by the warning.
- Do not give a stranger remote access to the computer.
- Do not provide passwords, card details, or verification codes.
How to tell a browser scam from a genuine alert
A browser page can imitate Windows, Microsoft, or an antivirus dashboard. Look at where the message appears: a web page with a strange address, a browser notification, or a full-screen tab is not the same as opening Windows Security yourself from the Start menu. A legitimate security product may display an alert inside its installed application, but you should verify it from that application rather than the pop-up’s link.
Pressure is another strong clue. Unexpected phone numbers, demands for gift cards or immediate payment, claims that your license expires in minutes, and instructions to install remote-access software are common scam patterns. Do not trust a logo or a familiar name by itself; scammers copy both.
How to safely close the warning
First stop interacting with the page. Try closing the tab or browser with its normal controls. If the page is full-screen, press the Windows key or use Alt+F4 to return to the desktop. If the browser stops responding, open Task Manager with Ctrl+Shift+Esc, select the browser, and choose End task. Reopen the browser without restoring the previous tabs if it offers that choice.
When the browser opens again, do not revisit the page. Review browser notification permissions and remove the suspicious site. Clear its site data if needed. If the warning returns even when the browser is closed, inspect recently installed applications and startup entries, then run a trusted scan.
Check Windows Security yourself
Open Windows Security from the Start menu, not from the pop-up. Review Virus & threat protection and Protection history. Install pending Windows updates and security intelligence updates, then run a full scan. Follow the security product’s own guidance for anything it detects.
A clean scan does not make the pop-up legitimate, and a pop-up does not prove that the computer is infected. If fake warnings continue outside the browser, unknown software appeared, or security settings changed without your approval, disconnect from sensitive accounts and seek qualified support.
What if I called the scammer?
End the call and do not follow further instructions. If you installed remote-access software, gave the caller control, or allowed them to change settings, disconnect the computer from the internet when safe and use a different clean device to change important passwords. Start with email, banking, payment, and work accounts.
Check installed apps for remote-access tools you did not intentionally use and ask a qualified technician to inspect the device. Contact your employer’s security team if it is a work computer. Do not rely on the caller to “undo” changes or refund a payment; the same person may ask for more money.
What if I paid or shared payment information?
Contact your bank, card issuer, or payment provider immediately using the official app or the number printed on the card. Explain that the payment was made after a suspected technical-support scam. Ask about blocking or replacing the card, disputing the transaction, and monitoring the account.
Save the receipt, caller details, website address, emails, and screenshots if you can do so without returning to the scam page. Report the incident through the relevant payment provider and local fraud-reporting channel. Do not send more money to recover the first payment.
What if I provided a password or verification code?
Change the exposed password from the official service website or app. If you reused it, change every reused account to a unique password. Turn on multi-factor authentication and review active sessions, recovery details, forwarding rules, and recent sign-ins.
A verification code can be as sensitive as a password. Tell the provider that you may have shared it and follow its account-recovery guidance. Never share another code with a person who calls unexpectedly, even if they know your name or claim to be from support.
Prevent fake virus warnings in the future
Keep Windows, your browser, and trusted security software updated. Limit browser notifications to websites you recognize, review extensions regularly, and avoid pirated software, fake updates, and unexpected remote-support offers. If you are unsure, close the page and open the organization’s official app or type its known address yourself.
Remember the simple rule: real security decisions should be visible in the security product or account you open yourself. A website that gives a phone number and demands immediate action is asking you to trust the attacker’s page, not your computer’s actual security status.
Questions customers often ask
- Are “You have a virus” pop-ups always scams?
- Many are browser-based scareware scams, especially when they demand a phone call, payment, download, or remote access. Verify the computer by opening Windows Security or your installed security product yourself.
- What should I do if the fake warning will not close?
- Stop clicking inside the page. Try closing the tab, use Alt+F4, or end the browser through Task Manager. Reopen without restoring the suspicious tabs.
- Should I call Microsoft using the number shown?
- No. Do not call a number displayed in an unexpected pop-up. Use Microsoft’s official support channels or the Windows Security app opened from your own computer.
- Can a scammer access my computer if I only called?
- A phone call alone does not give remote access, but the risk increases if you installed their software, shared a code, or approved control. Disconnect when appropriate, secure accounts from a clean device, and seek help.
View all Bitdefender guides · Review Bitdefender Internet Security · Stop suspicious pop-ups on Windows · Learn about Windows 11 phishing protection · Review installation troubleshooting · Contact security support