Pressure and a phone number
The message says you must act immediately, call a number, keep the window open, or pay to prevent lost files, account closure, or another emergency.
Do this now
Stop the pressure before deciding what to do.
- Do not call the displayed number. Do not click its links, pay, download a program, or share a support code.
- If an unknown person has remote control, turn the computer off. Disconnect it from the internet or network if you can, and stop talking to the caller.
- If financial details were shared, use a different trusted device to contact your bank or card issuer through the official number on your statement or card.
- Keep one-time verification codes private. No person who contacted you unexpectedly should receive a code sent to your phone or email.
Free Scam Safety Flyer
Keep the Scam and Pop-Up Safety Guide nearby.
View it now, download a copy to print, or share it with a family member or friend. It summarizes the first safe steps without asking you to diagnose the computer.
How to recognize a fake tech-support warning
Requests for remote access
A caller asks you to install a remote-control program, share a code, open banking pages, or let them move the mouse while they claim to diagnose the computer.
Unusual payment methods
The person requests gift cards, cryptocurrency, wire transfers, payment-app transfers, or repeated card attempts. Legitimate support should not pressure you into those methods.
Claims that caller ID proves identity
Caller ID can be altered. A familiar company, agency, or local number on the screen does not prove who is actually calling.
What to do if you called, paid, or gave remote access
First, end the contact. If the caller still controls the computer, turn it off and disconnect it from the network. Do not assume the device is clean simply because the visible pop-up is gone. Someone with remote access may have installed software, changed settings, copied information, or watched what was typed.
From another trusted device, contact financial institutions through their official apps, statements, or the number printed on a card. Review activity and follow their fraud instructions. Change passwords that may have been exposed, starting with email because email is often used to reset other accounts. Use a unique password for each account and enable multi-factor authentication. Never approve a sign-in or share a verification code you did not request.
If you are unsure what was shared, write down what you remember: names used by the caller, payment method, programs installed, websites visited, and accounts opened during the session. You do not need a perfect timeline. Those details help determine a sensible next step.
How IT Wes helps Tucson residents after a pop-up scam
IT Wes begins by separating a browser scare from a broader compromise. A pop-up by itself is not proof of a computer virus. The risk changes when a program was installed, an unknown person received remote access, passwords or financial information were entered, or suspicious behavior continues afterward.
Depending on what happened, support may include closing and cleaning up the browser session, reviewing installed remote-access or unwanted software, running appropriate security scans, removing suspicious items, installing updates, discussing backups, and helping you plan password or account recovery. No responsible review can promise that every consequence is visible immediately, so IT Wes will explain limitations and follow-up steps in plain language.
For a deeper explanation of how these warnings work, read the IT Wes Microsoft pop-up resource. You can also review current guidance from Microsoft Support and the Federal Trade Commission.
Questions, answered
Microsoft pop-up scam questions, answered
Can I close a fake Microsoft pop-up?
Usually, yes. Do not use the number or button shown in the warning. Try closing the browser. If it will not close on Windows, use Ctrl + Alt + Delete to open Task Manager and end the browser, or turn the computer off. Do not restore the old browser tabs when you reopen it.
What if I gave the scammer remote access?
Turn the computer off and disconnect it from the internet or network. From a different trusted device, change exposed passwords starting with email, enable multi-factor authentication, and arrange a security review before returning to normal use.
What if I paid the scammer or shared financial information?
Contact the bank, card issuer, or payment provider through the official number on your statement, card, or trusted app. Explain what happened, review recent activity, and follow its fraud-protection instructions. Do not use a number supplied by the caller or pop-up.
Does a pop-up mean my computer has a virus?
Not necessarily. Many fake warnings are scare pages inside a browser and are not proof that malware is installed. A review is more important if software was downloaded, remote access was granted, passwords were entered, or suspicious behavior continues after the browser is closed.
Can IT Wes help remotely?
Sometimes. A browser cleanup, review, or follow-up may be possible remotely, but only after you contact IT Wes through a verified channel. If an unknown person still has control or the device should remain offline, a scheduled on-site visit may be safer.