Fake virus pop-ups are designed to make a web page feel like an emergency. They may imitate a Windows or Apple alert, use a fake scan animation, show a phone number or place a large button over the page. A website can also have permission to send notifications that appear on the desktop. These signs are different from a report inside genuine installed security software. You can close the warning without calling, paying or installing anything, then check the browser permission that may have allowed it.
Start here
Start with the browser, not the pop-up
Close the message using the browser window controls, then review one relevant site permission.
Close the browser warningIgnore fake buttons and use the browser’s own tab or window controls.Read this part
Check the source permissionReview the browser’s notification or pop-up setting and block the specific offending site without returning to the suspicious page.Read this part
Record what persistsNote whether the warning returns, whether an extension or installed tool is involved, and what you changed.Read this part
Close with browser controls
Do not phone, pay, install software or grant remote access because a pop-up tells you to. Fake close buttons can open another page or download. Use the browser’s own close control, such as the tab’s close button or the window control. If a Safari page keeps returning on a Mac, Apple supports quitting Safari and holding Shift while reopening it so the previous page is not restored.
If the message is a desktop notification rather than an open page, do not follow it. The appearance alone does not prove that installed security software found anything. Keep the operating system’s genuine security notifications enabled; the goal is to remove a misleading website permission, not silence all warnings.
Apple’s official guidance covers deceptive pop-ups, fake buttons and relevant Safari settings: Apple Support: avoid deceptive pop-ups and unwanted software.
Review one browser setting
In desktop Chrome, open Settings, then Privacy and security, then Site settings, then Notifications. Check which site is sending the unwanted notification. Under “Not allowed to send notifications”, choose Add and enter that site’s address, following the current Chrome prompts. Do not revisit the suspicious site to change its permission; use the settings page instead. Chrome’s notification controls manage site permission. They are not a malware scanner.
In Safari on a Mac, open Settings, then Websites, then Pop-up Windows, and set the relevant site to Block if it is listed. In Safari’s Security settings, keep “Warn when visiting a fraudulent website” enabled. Settings names can vary slightly by browser version, so use the browser’s own help if a label differs.
Inspect extensions by name and source. Only disable a clearly unwanted extension when you understand what it is and why it is being changed. Do not perform a bulk reset or remove everything unfamiliar just because a pop-up was alarming. If the browser appears managed unexpectedly, seek help rather than trying to bypass management.
Sources: Chrome notification permissions and Apple pop-up guidance.
Decide what the warning means next
Closing the pop-up and blocking a permission are useful reversible steps, but they do not prove the computer is clean. If a separately installed security tool reports a detection, follow that tool’s supported information and seek help if the action is unclear. If the problem is persistent after the browser checks, an assessment may be more useful than repeated clicking.
Be more cautious if you installed software from the warning, gave someone remote access, entered a password or shared payment information. Use suspected scam: first steps for the money or account concern. Record what happened and contact the relevant provider through official details.
Persistent pop-ups, redirects or unwanted extensions can be symptoms of unwanted software, but they are not proof by themselves. Keep updates and Safe Browsing or equivalent protections enabled, and use trusted software sources.
Source: Google Chrome guidance on unwanted software symptoms.
What to read next
If you’d rather have local help, see our virus and malware diagnosis help.