Scam Watch

How can you recognize Browser pop up 'your computer is infected' — Microsoft impersonation?

TLDR

Full screen browser pop up with Microsoft logo, fake BSOD, loud alarm sound and 1 888 number claiming Windows is infected and the user is locked out. Real Microsoft never displays a phone number in error messages. Indicators: pop up...

How it works

Full screen browser pop up with Microsoft logo, fake BSOD, loud alarm sound and 1 888 number claiming Windows is infected and the user is locked out. Real Microsoft never displays a phone number in error messages. Indicators: pop up...

Red flags

  • Urgent pressure to click, pay, or share codes immediately.
  • A link or sender that does not match the official organization.
  • Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.

What to do

  1. 1Real Microsoft never displays a phone number in error messages.
  2. 2Never call the number.
  3. 3IF YOU CALLED: do not let them install AnyDesk/TeamViewer/UltraViewer, hang up, disconnect from network if remote access was granted, run Malwarebytes scan, change all passwords from a different device, file at ReportFraud.ftc.gov.

Source

FAQ

Is Browser pop up 'your computer is infected' — Microsoft impersonation a real scam pattern?

Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.

What are the first warning signs?

Urgent pressure to click, pay, or share codes immediately.; A link or sender that does not match the official organization.; Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.

What should I do first?

Real Microsoft never displays a phone number in error messages.; Never call the number.; IF YOU CALLED: do not let them install AnyDesk/TeamViewer/UltraViewer, hang up, disconnect from network if remote access was granted, run Malwarebytes scan, change all passwords from a different device, file at ReportFraud.ftc.gov.

Can LegalAudit check my case?

Yes. Start a free chat and paste the message, link, sender, or payment details for triage.