TLDR
Full screen browser pop up with Microsoft logo, fake BSOD, loud alarm sound and 1 888 number claiming Windows is infected and the user is locked out. Real Microsoft never displays a phone number in error messages. Indicators: pop up...
How it works
Full screen browser pop up with Microsoft logo, fake BSOD, loud alarm sound and 1 888 number claiming Windows is infected and the user is locked out. Real Microsoft never displays a phone number in error messages. Indicators: pop up...
Red flags
- Urgent pressure to click, pay, or share codes immediately.
- A link or sender that does not match the official organization.
- Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What to do
- 1Real Microsoft never displays a phone number in error messages.
- 2Never call the number.
- 3IF YOU CALLED: do not let them install AnyDesk/TeamViewer/UltraViewer, hang up, disconnect from network if remote access was granted, run Malwarebytes scan, change all passwords from a different device, file at ReportFraud.ftc.gov.
Source
FTC
Source reviewed by Mythos Forensic Team
https://consumer.ftc.gov/articles/how-spot-avoid-and-report-tech-support-scamsFAQ
Is Browser pop up 'your computer is infected' — Microsoft impersonation a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Urgent pressure to click, pay, or share codes immediately.; A link or sender that does not match the official organization.; Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What should I do first?
Real Microsoft never displays a phone number in error messages.; Never call the number.; IF YOU CALLED: do not let them install AnyDesk/TeamViewer/UltraViewer, hang up, disconnect from network if remote access was granted, run Malwarebytes scan, change all passwords from a different device, file at ReportFraud.ftc.gov.
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.