Malware Pop-Ups on SMS / Text
Scam texts contain links that open fake virus pop-ups in the phone's browser, pressuring recipients to call fake support or install harmful apps.
Part of: Malware Popups
Last reviewed: 1 June 2026
A malware pop-up scam can begin with a single text: a link promising a parcel update, a prize, or a message that 'something needs your attention'. Tapping it opens the phone's browser to a scareware page warning that the device is infected.
SMS is a neutral channel; the harm comes from the malicious page the link opens. Scammers favour text because a short message with one link gives the recipient little context and a one-tap path to a page staged as an urgent system alert.
How this scam works on SMS / text
The text invites you to tap a link for a delivery, reward, or warning. The link opens a browser page displaying a full-screen 'virus detected' alert, sometimes with alarm sounds and a blocked back button.
The page urges you to call a 'support' number or install an app to remove the threat. The number reaches a fake support scammer and the app is malware. The warning has scanned nothing — it is a webpage mimicking a system alert.
The element of surprise on a personal device, combined with a locked screen, is meant to provoke a call or install before the user realises the alert is fake.
Common red flags
- A text link opens a 'virus detected' pop-up in your browser
- The page blocks the back button or tries to stop you closing it
- A support number or app download is pushed urgently
- Alarm sounds or flashing warnings accompany the alert
- The message offered a parcel update, prize, or vague 'attention needed' hook
- The warning claims to be from your phone but appears in the browser
How to protect yourself
- Do not tap links in unexpected texts that lead to such pages
- If a virus pop-up appears, close the tab; force-quit the browser if blocked
- Never call the number or install the app the pop-up demands
- Know that a webpage cannot scan your phone for viruses
- Delete the original text and block the sender
- Use reputable, self-chosen security software for real scans
How to report it
- Forward the text to your national smishing or spam reporting number where available
- Report the scam page to your browser's safe-browsing or phishing service
- File a report with your local fraud or cybercrime reporting service
Frequently asked questions
I tapped the text link on my phone but closed it right away — what should I do?
This is generally low risk since you didn't call the number or download anything, but you can run a scan with your own trusted security app for peace of mind. Delete the original text, block the sender, and avoid similar links in future.
Does forwarding the scam text to a friend to warn them put them at risk?
Forwarding the text itself is safe as long as your friend doesn't tap the link — the warning message is just text, and the risk lies in what happens if the embedded link is opened. It's a reasonable way to alert others, though reporting the text to your national spam-reporting service is also worthwhile.
Why did my phone's browser show a warning that looked like it came from my carrier?
Scammers sometimes style these fake alerts to resemble notices from mobile carriers or device manufacturers, since people are used to receiving legitimate messages from them. It remains a webpage designed to scare you — carriers do not deliver security warnings through a browser pop-up.
A text link opened a virus warning — is my phone infected?
Very unlikely. The warning is a webpage designed to scare you, not a real scan. Close the tab without calling or installing anything, delete the text, and run a scan with your own trusted security app if you wish.