Fight scams, block hackers, and prevent threats with Avast Mobile Security
- Security
- Privacy
- Performance
Fake virus alerts are more than just a nuisance — falling for one could install real malware onto your device. Learn how to spot fake virus warnings and pop-ups, then get a powerful digital security app to help secure your devices against online threats.
A fake virus is an online warning message that falsely claims your device is infected and must be fixed. Fake virus alerts are a form of scareware designed to imitate a real virus warning and panic you into downloading or buying fake virus protection. But if you click a fake virus pop-up, rather than installing real antivirus software on your device, you may actually download malware.
To spot a fake virus, look for clues in the pop-up like poor design, unusual wording, incorrect spelling, a sense of urgency, intrusive notifications, and other signs that the virus warning is not legitimate.
Signs of a fake virus warning include a slow device, intrusive alerts, and requests to call tech support.
Here are some of the signs that a pop-up virus alert is fake:
You don’t use antivirus software. Only software installed on your device can complete a full scan for viruses — if you don’t have an antivirus, you won’t get genuine virus warnings.
You have an Apple product. iOS and macOS do not display virus warnings. If you encounter one, it is a fake from a website accessed through your browser.
A high number of viruses are detected. If the pop-up claims there are multiple instances of malware on your device, it is usually a scare tactic.
The alert behaves unexpectedly. If pop-ups automatically launch a new browser window, block or freeze your screen, or can’t be closed, they are probably fake virus alerts.
You can’t install a real antivirus. Certain types of pop-up malware can prevent you from installing legitimate antivirus software like Avast Free Antivirus.
The warning is ambiguous. Fake virus alerts often lack details about the threats they warn you about. If the message is vague, it’s probably an attempt to trick you.
The alert is poorly written. Pay attention to the quality of language used in the alert — poor grammar and spelling mistakes are red flags.
There are URL or brand discrepancies. Scammers pretending to be a legitimate brand may use slight variations of the company’s name, e.g. “Avasst” or “Avvast.” Watch for brand misspellings or incorrect domains.
There is a sense of urgency. Exclamation marks, time-limited offers, and calls to act immediately within pop-ups are a way to pressure you into making a quick decision.
You are notified repeatedly. Excessive, frequent, and intrusive virus messages may signal a potential scam — legitimate antivirus programs typically provide timely and measured notifications.
You need to pay for a resolution. Be skeptical of alerts urgently demanding payment to resolve the issue. Reputable free antivirus programs may recommend an upgrade for improved security but won’t force payment to remove a virus.
You need to call tech support. Real antivirus warnings don’t include a phone number. If you call the number on a pop-up fake virus alert, you will be connected to scammers who will try to steal money and access your private data — this is a type of tech support scam.
Examples of fake virus alerts include malvertising, fake system tray notifications, and copycat advertisements. No matter what type of fake virus warning you see, the purpose is the same — to infect your device or scam you out of money.
Scammers will try to mimic genuine notifications from legitimate antivirus brands by closely matching their designs and illegally using their logos.
The fake McAfee pop-up, a Trojan spyware alert scam, is an example of this in action. The fake pop-up uses the familiar McAfee logo to seem trustworthy while scaring people into clicking a malicious download link and handing over money to get “protected.” This type of fake virus alert can be convincing, but pay attention to exaggerated or fear-mongering language.
Malvertisements are ads infected with malware displayed on legitimate websites. Cybercriminals purchase online ad space from advertising networks so they can display their fake virus alerts across the web.
In 2023, fake Webex adverts on Google tricked victims into downloading malware known as BatLoader.
In 2016, visitors to the free version of the music streaming platform Spotify were targeted with compromised ads that caused their browser to automatically open a malware website.
This example of a fake virus warning targets Windows users when the alert appears in the system tray on the bottom-right of the Windows taskbar. System tray notifications are less common than malvertising and copycat ads but can be the most convincing as they are visible from your desktop, and may look like official Windows notifications.
To get rid of a fake virus warning, you need to run a scan with legitimate antivirus software. Before you do so, stay calm and don’t click any buttons or links on the pop-up.
Here are the steps to take if you think a virus warning is fake:
Don’t click anywhere on the alert. Fake virus pop-ups might employ deceptive close buttons (X), which trigger your browser to open a compromised website or start a download.
Check if it's a scam. Look for signs that the alert is fake. If you’re in doubt, do some research — taking a screenshot of the pop-up and performing a reverse image search could let you know if it’s a scam.
Close your browser tabs. Use Task Manager (CMD/Ctrl + Shift + Esc) or right-click the browser in your taskbar and click Close all Windows. If you’re using a mobile device, close your browser app without accidentally tapping the ad.
Run a virus scan. Use a virus removal tool to scan your device for malware and safely remove any threats.
Clear your browser cache. By clearing your browser history and cache, you can reduce the chance of reloading the same ads, and flush lingering traces of malicious code from your browser.
The best way to prevent fake virus pop-ups is to install legitimate antivirus software, use an ad blocker on your browser, and keep your devices’ operating systems up to date. But some fake alerts may still slip through, so stay vigilant for deceptive messages designed to mimic legitimate warnings.
Here’s how to shield your device from malicious virus notifications:
Disable pop-ups on mobile. Go to Settings > Notifications and turn off pop-ups and push notifications.
Remove suspicious apps from your phone. If you start receiving fake virus alerts right after installing a new app, it could be spyware, and you should delete it immediately.
Activate your browser’s pop-up blocker. Ad blockers can help protect you from malware as you browse the web. You can always disable them later if they’re preventing sites from loading.
Install antivirus software. Download an antivirus with features like a firewall and real-time malware protection from a reputable cybersecurity brand.
Keep your software updated. Software companies provide updated code to “patch” security vulnerabilities, so be sure to keep your apps and operating system updated.
Avoid unsecured websites. Only visit websites that have “https” in the URL. Sites with just “http” don’t have an SSL certificate, which means they are not protected by reliable data encryption. You can also block unsafe websites so you don’t accidentally visit them again in the future.
Spotting the deceptive tactics of scammers can be tricky — they can be experts at manipulation. Thankfully, with the advanced threat detection of Avast Free Antivirus, you don’t need to do all the hard work by yourself.
Covering up to five devices, our award-winning security software can help keep you safe by blocking suspicious websites, stopping scam emails from reaching your inbox, and providing real-time protection against a wide range of online threats.
