A pop-up said my computer was infected. I believed it.
I was browsing at home when a pop-up locked the screen with red warnings and a countdown that said my PC was infected. I am not technical, so fear pushed me to call the number on the banner instead of closing the tab.
The voice on the line sounded like a help desk—calm, urgent, full of acronyms. They asked for remote access to "disinfect" the machine and quoted a cleanup fee I paid because I thought I was buying peace.
Tech-support pop-up scams use scare copy to sell useless software or steal data once they control the mouse. The infection was theater; the real damage was the payment and whatever they scraped while logged in.
I pictured losing years of photos and tax files, so I moved fast to avoid "losing everything." I did not want to wait for a real IT friend on a Friday night, and the pop-up looked close enough to Windows styling to feel official.
My bank flagged the charge as risky the next morning, and a local technician laughed gently when he said browser pop-ups are not virus scans. Hearing both confirmations in one day was when I understood I had paid a stranger for panic.
I lost money and hours re-securing accounts, and I felt stupid every time I retold the story. Reporting gave me a checklist instead of just shame.
I now force-quit the browser, run real scans from software I installed myself, and never grant remote access to inbound callers. I wish I had known pop-ups cannot diagnose hardware.
- Never call numbers from pop-ups or allow remote access to strangers—use official support channels you look up.
- Report to the FTC.
For more help, see our Report a scam page and Spot and avoid scams guide.
Test your understanding
Flip each card to check your answer
Tech-support pop-up scams use scare copy to sell useless software or steal data once they control the mouse. The infection was theater; the real damage was the payment and whatever they scraped while logged in.
Tap to flipTech-support pop-up scams use scare copy to sell useless software or steal data once they control the mouse. The infection was theater; the real damage was the payment and whatever they scraped while logged in.