Is a Windows upgrade pop-up asking for payment a scam?
Yes. Microsoft does not charge for Windows operating system upgrades through browser pop-ups or unexpected calls. Pop-ups asking for payment are scams.
Last reviewed: 1 August 2026
Explanation
Tech-support pop-ups impersonating Microsoft are among the most persistent online scams. A full-screen alert appears warning that your computer is infected, your Windows licence has expired, or your operating system must be upgraded, and you must call a number or pay a fee immediately. The goal is either to get you on the phone with a fake 'Microsoft technician' who will demand remote access and payment, or to send you to a fake payment page.
These pop-ups usually arrive through low-quality advertising networks, compromised websites, or browser notification permissions granted to a spammy site by accident — not because anything is wrong with your computer. The alarming full-screen takeover, flashing text, and audio warnings are stage dressing that any web page can produce. Nothing on the page has scanned your machine, and nothing on it can know whether you are infected.
Microsoft distributes genuine Windows updates automatically and for free through Windows Update — it never presents payment demands via browser pop-ups, and it does not embed support phone numbers in warning screens. Closing the pop-up (even if it appears full-screen) and running a reputable security scan is the correct response. If the same page keeps reappearing, remove the offending site's notification permission in your browser settings and clear recent browsing data to break the loop.
Common red flags
- Full-screen browser pop-up with a Microsoft logo demanding you call a number
- Pop-up claims your computer is locked or has a critical virus
- Request for payment by gift card, wire transfer, or cryptocurrency
- Browser appears frozen — usually resolved by pressing Alt+F4 or force-quitting
What to do now
- Close the browser tab or force-quit the browser — do not call the number
- Run a scan with a reputable security product to check for adware
- If you already paid or gave remote access, contact your bank and change passwords
- Report the pop-up domain to your national cyber crime service
Frequently asked questions
What if the pop-up plays a loud audio warning?
Audio alarms are a deliberate tactic to create panic and stop you thinking clearly. Mute your speakers and close the browser. No legitimate system alert requires you to call a number.
Does the pop-up mean my computer is already infected?
Usually not. Most of these pages are simply aggressive ads served through low-quality networks. A scan with reputable security software will confirm whether any adware is present, but the pop-up itself proves nothing about your machine.
Does Microsoft ever contact users about viruses on their computer?
No. Microsoft does not send unsolicited pop-ups, emails, or phone calls telling individuals their computer is infected. Any contact of that kind is impersonation, whoever it claims to be from.