Malware Pop-Ups on SMS / Text
Scam texts contain links that open fake virus pop-ups in the phone's browser, pressuring recipients to call fake support or install harmful apps.
Part of: Malware Popups
Last reviewed: 1 June 2026
A malware pop-up scam can begin with a single text: a link promising a parcel update, a prize, or a message that 'something needs your attention'. Tapping it opens the phone's browser to a scareware page warning that the device is infected.
SMS is a neutral channel; the harm comes from the malicious page the link opens. Scammers favour text because a short message with one link gives the recipient little context and a one-tap path to a page staged as an urgent system alert.
How this scam works on SMS / text
The text invites you to tap a link for a delivery, reward, or warning. The link opens a browser page displaying a full-screen 'virus detected' alert, sometimes with alarm sounds and a blocked back button.
The page urges you to call a 'support' number or install an app to remove the threat. The number reaches a fake support scammer and the app is malware. The warning has scanned nothing — it is a webpage mimicking a system alert.
The element of surprise on a personal device, combined with a locked screen, is meant to provoke a call or install before the user realises the alert is fake.
Common red flags
- A text link opens a 'virus detected' pop-up in your browser
- The page blocks the back button or tries to stop you closing it
- A support number or app download is pushed urgently
- Alarm sounds or flashing warnings accompany the alert
- The message offered a parcel update, prize, or vague 'attention needed' hook
- The warning claims to be from your phone but appears in the browser
How to protect yourself
- Do not tap links in unexpected texts that lead to such pages
- If a virus pop-up appears, close the tab; force-quit the browser if blocked
- Never call the number or install the app the pop-up demands
- Know that a webpage cannot scan your phone for viruses
- Delete the original text and block the sender
- Use reputable, self-chosen security software for real scans
How to report it
- Forward the text to your national smishing or spam reporting number where available
- Report the scam page to your browser's safe-browsing or phishing service
- File a report with your local fraud or cybercrime reporting service
Frequently asked questions
A text link opened a virus warning — is my phone infected?
Very unlikely. The warning is a webpage designed to scare you, not a real scan. Close the tab without calling or installing anything, delete the text, and run a scan with your own trusted security app if you wish.