Skip to content
ScanMyPrivacy
Menu

Privacy and leak tests

Full Privacy ScanDNS Leak TestWebRTC Leak TestBrowser Fingerprint TestAm I Using a VPN?HTTP Headers ViewerUser Agent CheckerOpen Port Checker

Online safety assistant

Website Safety CheckerSuspicious Link CheckerScam and Phishing Message CheckerBrowser Security GuideMobile App Safety CheckPersonal Security Checkup

IP and network lookups

IP LookupMy IP LocationWhat Is My Public IP?What Is My IPv6 Address?Reverse DNS LookupDNS Lookup
Online safety Guides API About

Safe browsing

Fake virus warnings and malicious popups: what to do

Updated · 2 min read

Written by the ScanMyPrivacy team. How we write and check guides · Report a correction

Try it yourself:Browser Security GuideSuspicious Link CheckerScam and Phishing Message Checker

You are browsing and a full-screen page says "Virus detected", plays an alarm and gives a phone number. This is almost always a scam. A website cannot scan your computer for viruses, and real security software does not warn you through a web page.

How to recognise a fake warning

  • It appears inside a web page or browser window, not from your own security software.
  • It uses countdowns, alarms, "do not close this page" or "your data is being deleted".
  • It tells you to call a number, install a tool or give remote access.
  • It claims to be from Microsoft, Apple or Google. They do not show warnings with phone numbers.

How to close it safely

  1. Do not call the number or click the buttons, including "OK" or "Cancel".
  2. Close the tab or window. If it will not close, use the keyboard: Alt+F4 on Windows, Command+Q on Mac. On a phone, close the browser from the app switcher.
  3. If the browser reopens the page, restart it and choose not to restore the previous session.
  4. Force quit using Task Manager (Windows) or Force Quit (Mac) if needed.

If you called or let someone in

Disconnect the device from the internet, remove any remote access app they asked you to install, and change your passwords from a different device. If you paid or shared card details, call your bank. Follow what to do if you clicked a phishing link.

Clean up notification spam

Some popups are browser notifications you allowed earlier. Open your browser's site settings, go to notifications and remove any site you do not recognise. Set "ask before sending" or block them. The browser security guide shows where this is for your browser.

Check extensions and apps

Unwanted popups can come from an extension. Remove extensions you do not use or did not install on purpose, and keep the rest to well-known ones. On a phone, delete apps you do not remember installing. See the mobile app safety guide.

Prevent them

  • Keep the browser updated and leave its built-in popup blocker on.
  • Avoid clicking ads on download or streaming sites.
  • Check suspicious addresses with the suspicious link checker.

Tools that can help

Antivirus and device protection

What it does: Scan for known malware and warn about dangerous downloads. What it does not do: Stop scams, phishing or fake support calls, which trick you instead of attacking the device. Built-in protection is enough for many people; a paid suite is optional.

  • Microsoft DefenderBuilt inNo commissionBuilt into Windows. Keep it on and updated before paying for anything else. Visit site
  • Google Play ProtectBuilt inNo commissionBuilt into Android phones with Google Play. Scans apps and can warn about harmful ones. Visit site

We list free and built-in options first. How we choose.

Keep reading

How to spot fake login pages and lookalike domainsLearn how to read a web address, catch lookalike domains and fake login pages, and what to do when a page asks for your password after a message or ad.What to do if you clicked a phishing linkClicked a suspicious link or typed a password on a fake page? Follow these steps in order: what to change, check and report, and what can wait.What to do after an online fraud in IndiaPaid a scammer, shared an OTP or clicked a fake link? A first-hour checklist for India: bank, 1930 helpline, cybercrime portal, evidence and Chakshu.App permissions explained for Android and iPhoneWhat camera, location, contacts, microphone and other app permissions really allow, which to refuse, and how to review and remove them on Android and iPhone.Strong passwords and two-step verification, made simpleSecure your accounts: unique passwords with a password manager, two-step verification starting with email, and how to end a stolen session.What your browser fingerprint reveals about youA browser fingerprint is a mix of settings sites read without cookies. See what it includes, how identifying it is and which steps reduce it.

Frequently asked questions

Can a website really detect a virus on my computer?

No. Websites cannot scan your files. A page claiming to have found viruses is a scam.

Is it safe to just close the tab?

Yes. Closing it without clicking anything inside is the safest response.

Why do these keep appearing?

You may have allowed notifications from a site, or an extension may be injecting ads. Review both.