Is a free antivirus tool offered in a website pop-up safe to install?
No. Pop-up antivirus offers are among the most common methods of distributing malware and adware under the guise of protection software.
Last reviewed: 1 June 2026
Explanation
Fake antivirus pop-ups present a fake scan result showing your device is 'infected' and offer a one-click fix. Clicking installs either genuine-looking fake security software that generates constant false alerts to push you toward a paid upgrade, or actual malware that steals credentials, monitors keystrokes, or locks your files for ransom. Real antivirus software is not distributed through browser pop-ups — it is purchased or downloaded directly from established vendors' official websites or through your operating system's built-in security settings. If a pop-up claims your device is infected, close your browser entirely and run a scan with software you already have installed rather than anything offered by the pop-up itself.
Common red flags
- Pop-up announces a virus scan result without you initiating one
- One-click install offered from an unknown website
- Software name slightly resembles a well-known brand
- Scan completes instantly and finds many threats
- Prompt to enter card details for a 'full clean'
What to do now
- Close the browser using Task Manager — do not click on the pop-up
- Run a scan with your existing installed security software
- Download security software only from the official vendor website
- Report the malvertising to the advertising network if identifiable
Frequently asked questions
What if I already installed the software from the pop-up?
Uninstall it immediately, then run a full scan with a reputable security tool. Change passwords for any accounts accessed since the install and monitor your bank statements.