"Your PC has 5 viruses" pop-up or call — is it real?

A pop-up locks your screen with a loud warning, or the phone rings and someone says they're from Microsoft. Either way, your first instinct is panic — your files, your photos, your bank logins. But real tech companies do not detect your viruses for you and then call to tell you about it. This is always a scam.

Why this scam works

The pop-up is designed to feel unclosable — a full-screen browser alert with a fake countdown or a system alarm sound. Panic pushes people to call the number before they stop to think. Once you call, the "technician" walks you into installing remote-access software like TeamViewer or AnyDesk — and now they're inside your computer, not fixing it.

5 signs it's fake

• They contacted you first — Microsoft, Apple, and antivirus companies don't call or pop up unsolicited warnings
• You can't close it normally — a real error lets you close the tab; this one fills the screen and blocks the X
• Asks for remote access — TeamViewer, AnyDesk, or "let me screen-share" is the actual attack, not the fix
• Wants payment by gift card or wire — for a "support fee" or "license renewal"
• Caller ID looks local or toll-free — spoofed to seem legitimate

The other version: a fake "Geek Squad" or antivirus renewal invoice

Instead of a pop-up, this variant arrives as an email (or sometimes a text) that looks like a receipt: Geek Squad, McAfee, Norton, or "PC Protection Plan" renewed automatically for a specific, alarming amount — commonly $299, $349.99, $399, or $498.98 — with a "1-800 number to call within 24 hours to cancel and get a refund." There is no real charge. Calling the number walks you into the exact same remote-access trap as the pop-up version above.

• You never had that subscription — or don't recognize the renewal date at all
• The "invoice" has no order number tied to a real Best Buy, McAfee, or Norton account you can check by logging in directly
• A tight 24-hour deadline — pressure to call before you think it through
• The sender address isn't the real company's domain — even if the display name says "Geek Squad" or "Best Buy"

Never call the number in the email. If you have an actual Best Buy, McAfee, or Norton account, log in directly (typing the address yourself, not clicking the email) to check your real billing history.

What to do instead

1. Do not call the number or click anything in the pop-up
2. Close it via Task Manager (Windows) or Force Quit (Mac) — not the fake "X" button
3. If you already gave remote access, disconnect from the internet and run a real antivirus scan, then change your passwords from a different device
4. Paste the message or call transcript into ScamCheck for a free risk score

Pop-ups are not your operating system

A full-screen browser page can look like Windows or macOS. It is still just a website. Real OS alerts do not list a random toll-free number to “Microsoft Support” and demand you call before you can close the window.

If you already gave remote access

1. Disconnect from the internet if you can do so safely
2. Uninstall remote tools you did not intend to keep (TeamViewer, AnyDesk, etc.)
3. Change passwords for email and banking from a different device
4. Call your bank if you shared card data or allowed “refund” theater
5. Consider a local trusted technician for a clean checkup

FAQ

• Would Apple/Microsoft call me first? Not out of the blue about viruses on your PC.
• The person knew my name. Data is cheap. Knowledge is not authenticity.