That “Your Computer Is Infected” Popup Is Lying to You
It happens fast. You’re reading an article or browsing a website when the screen suddenly fills with a red alert. A loud alarm sounds. Large text declares that your computer has been infected with a virus. A phone number is prominently displayed. The message says to call immediately or your personal data will be lost.
Everything about the design is built to trigger panic. And panic is exactly what makes this particular scam work.
Here’s the truth: that popup is not a virus scan result. It is an advertisement — a malicious one, designed to look like an emergency. No website you visit can scan your computer. That’s not how the internet works.
Why This Popup Appears
Your computer doesn’t need to be infected for this popup to show up. It can appear on any device — desktop, laptop, tablet, phone — when you visit a website that runs certain types of advertising, or when you click a link that redirects to a page designed specifically to display it.
Scammers pay to place these alerts through advertising networks — the same kind of infrastructure that places regular ads on news sites and blogs. A legitimate-looking site can occasionally serve a malicious ad without the site owner even knowing. Some scammers also buy old or abandoned web domains specifically to redirect visitors to these popups.
The popup is coded to behave aggressively: it may try to prevent you from closing the tab, play an audio alarm on loop, or appear to “freeze” your browser. All of this is theatre. The page is just a webpage.
Why It’s Fake — and How to Know
Websites cannot scan your computer. Full stop. A webpage runs inside your browser, and your browser is sandboxed — deliberately kept separate — from the rest of your operating system and files. A website cannot see your files, your installed programs, your camera (unless you grant permission), or whether you have a virus.
When a popup claims to have detected five viruses on your device and lists them by name, it is displaying a pre-written message. Those virus names are the same on every computer that visits the page.
Real security alerts come from software installed on your device — your antivirus program, Windows Security on a PC, or XProtect on a Mac. They do not come from web pages, they do not play alarms, and they do not display a phone number to call.
What to Do When It Appears
The correct response has three parts, and all three matter:
Do not call the number. The number connects you to a scammer, not a tech support team. Calling begins a different scam that can cost you significantly more than the original popup suggested.
Do not download anything. The popup may offer a “free scan” or “removal tool.” This software is the actual problem — it may install malicious programs on your device, giving scammers real access to your files.
Close the browser. If the popup is preventing you from closing the tab normally, force-quit the browser entirely. On a Windows computer, press Ctrl + Shift + Esc to open Task Manager, find your browser in the list, and click “End Task.” On a Mac, press Command + Option + Esc, select your browser, and click “Force Quit.” When you reopen the browser, do not restore the previous session — open a fresh window instead.
That’s all you need to do. The popup disappears, and nothing has happened to your device.
What If I’m Not Sure?
If you called the number before reading this, or if you downloaded something from one of these pages, that’s worth taking seriously. Run a scan with a legitimate antivirus program — Windows Security (built into Windows 10 and 11) or a program like Malwarebytes are both reasonable options. If you’re not confident doing this on your own, a local computer repair shop can help.
There’s no shame in having been caught off guard. These popups are designed by professionals who spend their time making them look as alarming as possible.
One thing to do: The next time a popup alarm fills your screen, force-quit your browser before doing anything else. Close the whole program — not just the tab — and reopen it fresh. That one action breaks the scam before it can go any further.
Report tech support scams to the Canadian Anti-Fraud Centre at 1-888-495-8501 or antifraudcentre.ca.