The “Your Computer Has a Virus”
Pop-Up — The Scam

First, the truth: the screen is fake

That screaming full-screen warning — the Microsoft logos, the fake virus scan, the robot voice, the toll-free number labeled “Microsoft Support” — is a webpage dressed up in a costume. You landed on it through a bad ad or a mistyped web address. It cannot scan your computer, and just seeing it doesn't infect anything. Its only weapon is the phone number on the screen, and the fear that makes a person dial it.

Here's the one fact that settles every version of this scam: Microsoft's real error and warning messages never include a phone number — and Microsoft never cold-calls anyone about their computer. The moment any screen tells you to pick up the phone, you already know what it is. No shame if it rattled you — it's built by professionals to rattle people. Here's the calm way out.

How to close the screen that won't close

1. Touch nothing on the page itself — not even its own “Close” buttons. And never call the number.
2. If the noise is rattling you, turn the speakers down. The siren is theater.
3. Press Esc (or F11) to knock the page out of full-screen mode — suddenly it's visibly just a webpage.
4. Press Ctrl+W to close the tab. Still there? Alt+F4 closes the whole browser.
5. Stubborn? Press Ctrl+Shift+Esc to open Task Manager, click your browser (Edge, Chrome), then click End task.
6. When you reopen the browser, do not click “Restore pages” — that brings the scam right back.
7. Nothing worked? Hold the power button about ten seconds, restart, done. No harm comes from shutting down — whatever the screen claimed.

Was there ever a virus? The five-minute check

Almost certainly not — seeing the page doesn't infect a computer. For peace of mind, use the free protection already built into Windows: click Start, type Windows Security, open it, choose Virus & threat protection, and run a Quick scan. “No current threats” means exactly that. You do not need to buy a cleanup program because of a pop-up — that pitch is often the scam's second act.

The line that matters most: remote access

Everything on the screen is theater until someone connects to your computer. If a “technician” talks you into installing a remote-control program, they can see your screen, open your files, and — if you log into your bank while they're connected — visit the bank with you. The rule is one sentence: never let anyone who contacted you first connect to your computer. Real Microsoft support never starts the conversation.

If you called, let someone connect, or paid

1. If you only called and hung up: they got nothing. Expect more scam calls for a while — let unknown numbers go to voicemail.
2. If someone connected remotely: disconnect the internet and shut the computer down. From a different device, change your email password, then your bank passwords.
3. If they saw any banking: call your bank's fraud line today — before worrying about the computer. Banks handle this daily and won't scold you.
4. If you paid by card: call the number on the back and say “I was scammed — I want to dispute this charge.” These get reversed regularly.
5. If you paid by gift cards: call the card company, keep the cards and receipts, and report it anyway.
6. Before regular use, have the computer checked and the remote program removed — that's a normal $99 visit for me.

Watch for the scam that calls back

Pay one of these outfits once and your number goes on a list. Months later comes a friendlier call: a “refund department,” an “overpayment” they beg you to send back, or a company promising to recover your losses for a fee up front. Same industry, rescue-worker costume. Nobody legitimate charges money — or asks to get into your computer — to give you money back. My Recovery Scams guide covers this second wave; my Phishing Self-Defense guide covers the email version of the whole trick.

Report it — five minutes that genuinely counts

• ReportFraud.ftc.gov — the FTC's plain-English report site. File even if you lost nothing; sightings are useful data too.
• microsoft.com/reportascam — Microsoft's own report page for scams trading on their name.
• Lost money? Add your local police non-emergency line — a report number gives your bank paperwork to point at.
• Have handy: the date, the number you called (it's in your call history), and how you paid.

What's in the 27-page PDF

• How the scam actually works — the four-step stage play, in plain English
• The 60-second version: six things to remember, one page
• Anatomy of the screaming screen — the props that give it away every time
• Three facts that prove it's fake, straight from Microsoft's own rules
• The exact keys to close it: Esc, Ctrl+W, Alt+F4, and the Task Manager move
• The “Restore pages?” trap — and the five-minute Windows Security check afterward
• If you called, let someone connect, or paid — the first calls, in order, judgment-free
• The second wave: refund tricks, “recovery” fees, and fake FTC agents
• Real warning or scam? One table that sorts every case
• The same scam's other coats: cold calls, invoice emails, poisoned search results
• How to report it (FTC + Microsoft) and how families should talk about this one
• A tape-by-the-computer checklist, kitchen-table Q&A, plain-English glossary, and a fill-in cheat sheet

Why I wrote this

I give a talk on this exact scam at senior centers around Portage County, and this guide is the handout. It's the scam I get the most calls about — and the one where five calm minutes of know-how beats any software you could buy. Nobody should feel foolish for being rattled by a siren that was professionally built to rattle them. Print it, tape the checklist page by the computer, and pass a copy to a friend. And if a screen ever has your heart pounding, call me before you call anything on it. — Bill