Is a fake antivirus scan result that pops up on a website real?
No. Websites cannot scan your device. Pop-up scan results showing virus detections are fake alerts designed to frighten you into downloading malware or calling a scam number.
Last reviewed: 1 August 2026
Explanation
Fake antivirus pop-ups imitate the appearance of real security software — Windows Defender, Norton, McAfee — and claim to have found multiple threats on your device. They use alarming language, warning sounds, and countdown timers. The goal is to get you to click a 'Fix Now' button that downloads malware, or to call a tech-support number where scammers charge for fake services or install genuine malware via remote access. Websites do not have the ability to scan your device's files. Only software installed on your device can perform a real scan. Dismiss the pop-up by closing the browser tab or restarting your browser.
Everything about the page is theatre built from ordinary web techniques: full-screen mode that hides your browser controls, scripts that reopen dialog boxes when you try to leave, alarm sounds on a loop, and progress bars 'scanning' files the page cannot actually see. The threat count is invented; the countdown is decoration. The design goal is a few seconds of panic — enough to make calling the on-screen number or clicking the flashing button feel like the responsible response rather than the trap it is.
What follows a call to that number is the real scam: a patient 'technician' who requests remote access, shows you harmless system logs restyled as evidence of infection, and then charges heavily for fixing nothing — or worse, installs genuine malware and captures banking details while connected. So the whole defence happens before that point: never call numbers from pop-ups, close the browser forcefully if the page resists (Task Manager on Windows, Force Quit on Mac), and decline to restore tabs on reopening. If concern lingers, run a scan with security software you installed yourself — that is the only kind of scan result that means anything.
Common red flags
- Pop-up appears in a browser window, not in your system tray or installed software
- Claims to have found a specific number of threats
- Warning sound plays and the page tries to prevent you from closing it
- Provides a phone number to call for immediate assistance
What to do now
- Close the browser tab or force-quit the browser
- Do not call any number shown in the alert
- Run a real scan with your installed, up-to-date security software
- Clear your browser's cache if the pop-up keeps reappearing
Frequently asked questions
If I saw the pop-up, is my computer already infected?
Simply seeing a fake pop-up does not infect your computer. The infection risk arises if you click the alert, download something, or call the number provided.
The pop-up won't let me close the page — what should I do?
Force-close the browser: Task Manager on Windows or Force Quit on Mac, then decline to restore tabs when reopening. The 'unclosable' page is a script trick, not evidence of infection.
I called the number and let them connect to my computer — what now?
Disconnect from the internet, uninstall the remote access software they used, run a full scan with reputable security software, and change important passwords from another device. If you paid, dispute the charge with your bank immediately.