This is one of the most damaging scams targeting older adults. It is also one of the most preventable. Here is how it works, end to end, so you can immunize your parent.
How the scam unfolds
Step by step:
- Trigger. Your parent is browsing the web. They click a Facebook ad, a sketchy news site, or land on a compromised page.
- Hijack. A full-screen popup appears with red banners, sirens, sometimes audio. Says "your computer is infected, call Microsoft now."
- The phone call. If they call the number, a real person answers. The person sounds professional. They claim to be from Microsoft, Apple, or "your security team."
- Remote access. The "tech" asks the victim to install software (AnyDesk, TeamViewer, GoToAssist). This gives the scammer control of the computer.
- The "discovery." The scammer pretends to run diagnostics. Pretends to find serious problems. Sometimes shows fake error messages.
- The pitch. They sell a "fix" for $300 to $5,000. Or convince the victim to transfer money "to protect" the account.
- The harvest. While on the computer, the scammer also installs persistent malware, scrapes saved passwords, and accesses email or banking.
Total time: 30 minutes to 3 hours. Average loss per victim over 60: $5,000 according to FTC 2024 data, with many cases reaching six figures.
What the popup actually looks like
Common patterns:
- Full-screen red or yellow banner.
- Microsoft, Apple, or Norton/McAfee logos (fake).
- "Do not close this window" warnings.
- A loud audio loop saying "your computer has been infected."
- A phone number prominently displayed.
- Fake countdown timer "Your data will be deleted in 5 minutes."
None of this is real. The popup is just a web page with scary styling. The "infection" does not exist.
Step 1 response: close the browser
This is the only correct action in the moment:
Windows
- Press Ctrl + Alt + Delete.
- Pick "Task Manager."
- Find the browser (Chrome, Edge, Firefox).
- Click "End task."
Mac
- Press Command + Option + Escape.
- Pick the browser.
- Click "Force Quit."
If that fails
Hold the power button down until the computer turns off. Wait 10 seconds. Turn it back on. The popup is gone.
Step 2: run an actual virus scan (to be safe)
On Windows: open Windows Security (built in), click Virus & threat protection, click "Quick scan."
On Mac: macOS handles most of this on its own. If extra reassurance is wanted, run Malwarebytes (free) once.
The scan will almost certainly come up clean. The popup itself is not a virus, just a webpage.
Step 3: prevent the next one
Three things to install on your parent's browser:
- uBlock Origin. Free browser extension. Blocks the ad networks that serve these scam popups. Single biggest prevention.
- Enable pop-up blocking in Chrome or Edge settings.
- Chrome's "Enhanced Safe Browsing" if they use Chrome.
This combination cuts popup encounters by 90%+.
What to do if they already called the number
If your parent called the number and gave the scammer access to the computer:
- Disconnect the internet immediately. Unplug the ethernet cable or turn off WiFi.
- Power off the computer. Do not power back on until you can help in person or by phone.
- Change passwords from a different device. Email first, then bank, then everything else.
- Call the bank's fraud line. If they entered any payment info, the bank can freeze the card.
- Place a credit freeze. Experian, Equifax, TransUnion. Takes 5 minutes online. Free.
- If money was sent: call the bank or money service to attempt reversal. Time matters.
- Report to FTC: reportfraud.ftc.gov.
- Wipe the computer. Anyone who had remote access cannot be trusted to be off it. Factory reset is the only safe path. Take the computer to a real technician.
The reminder card
Stick this next to their computer:
If you see a popup that says you have a virus:
1. Do not call any phone number on the screen. Ever.
2. Microsoft and Apple never call. Anyone claiming to be them is lying.
3. Force quit the browser (Ctrl + Alt + Delete on Windows, Command + Option + Escape on Mac).
4. If you cannot close it, just turn the computer off.
5. Call Kinline at (855) 758-6884 if unsure.
Read more on what to do when popups keep coming and our roundup of senior scams.