Real Tech Support Alert vs Scareware Popup
How to distinguish a genuine operating-system security alert from scareware designed to frighten you into calling a fake support line.
Last reviewed: 1 June 2026
Real security warnings are undramatic. Your operating system, or the antivirus you installed yourself, tells you something needs updating or has been quarantined, the computer carries on working, and the notice can be closed. Scareware imitates that authority and adds everything the real thing lacks: a full-screen page you cannot scroll past, an alarm sound, a claim that your files or banking details are being transmitted right now, and a phone number offering to stop it. It usually appears after a mistyped address or an advert on an otherwise ordinary site, so it feels like something you caused. The distinction that matters most is where the warning lives. Genuine alerts come from software installed on the machine and never ask you to ring anybody. A warning inside a browser tab is a web page, nothing more.
Side-by-side comparison
| Real OS or antivirus alert | Scareware browser popup | |
|---|---|---|
| Origin | Comes from your installed OS or antivirus software — not a browser tab | Appears inside your browser on a website you visited; cannot be scrolled past |
| Computer state | Computer continues to function normally; alert has a close or dismiss button | Claims the computer is locked, infected, or sending data; may play an alarm sound |
| Phone number | Microsoft, Apple, and security vendors do not put a phone number in an on-screen alert for you to call them | Displays a phone number prominently and urges you to call 'Microsoft Support' or 'Apple Security' |
| Action requested | Prompts you to update, scan, or quarantine — actions you take within the software | Insists you call a number or allow remote access to 'clean' the infection |
| Closing behaviour | Can be closed through normal window controls or task manager | Attempts to prevent closing; F11 or Alt+F4 may appear blocked or trigger another popup |
| Cost | Free security updates from your OS and legitimate antivirus you already own | Technician on the phone charges for 'cleaning tools', gift cards, or a support contract |
Common red flags
- Alert appears in a browser window, not a native OS dialog
- Plays an alarm sound or announces your computer is sending data
- Shows a phone number to call immediately
- Prevents you from closing the browser normally
- Claims to be from Microsoft, Apple, or a named antivirus via a website
Verification steps
- Press Alt+F4 (Windows) or Command+W (Mac) to close the browser tab
- If the browser is locked, open Task Manager and end the browser process — this is always safe
- Run a scan with your actual installed antivirus after closing the page
- Check your OS notification centre — genuine alerts appear there, not in a browser
What not to do
- Do not call the number displayed in a browser popup
- Do not allow remote access to anyone who contacted you because of a browser alert
- Do not pay for 'cleaning' services offered over the phone after a browser warning
A safe response
Close the browser, forcibly if the page resists. On Windows open Task Manager and end the browser process; on a Mac use Force Quit. That is always safe and nothing is lost. Do not ring the number and do not let anyone connect to your machine remotely. Once the page is gone, run a scan with the antivirus you already have. If you did call and gave someone remote access, disconnect from the internet, remove any remote-access software they installed, run a full scan, and change passwords for anything used on that computer, especially email and banking. If you paid, contact your bank or card issuer about disputing the charge.
Frequently asked questions
The popup showed my IP address and my location. How did it know that?
Any website you visit can see your IP address, and that alone gives a rough location along with your browser and operating system. It reads like inside knowledge, but it is standard information every page you open receives, and it says nothing at all about your computer being infected. Close the page and check with the antivirus installed on the machine, which is the only thing that can actually see what is on it.
Can a website actually lock my computer?
Websites can make browsers appear full-screen and unresponsive, but they cannot truly lock your computer. Task Manager (Windows) or Force Quit (Mac) will always let you close the browser.
What if I already called the number?
If you gave remote access to your computer, disconnect from the internet immediately and run a full antivirus scan. If you paid, contact your bank to dispute the charge. Change any passwords that may have been visible during the session.