Fake Tech Support Pop Up With Phone Number Fix

First: Don't Call That Number. Seriously.

If you're staring at a pop-up that says "Windows Security Alert — Call 1-800-XXX-XXXX immediately" with a big red warning, stop. This is a scam. Do not call. Do not type anything. The pop-up is fake, and the number connects to a scammer who'll try to get your credit card or remote access to your PC.

I've had three clients last month fall for this. One lost $500. Another got their Outlook password stolen. Don't be that person.

30-Second Fix: Kill the Browser Tab

This is the fastest way to get rid of a fake tech support pop-up. The pop-up is in your web browser — not in Windows itself. So you just close the browser.

Step 1: Force Close the Browser

Windows: Press Ctrl + Shift + Esc to open Task Manager. Find your browser (Chrome, Edge, Firefox), right-click it, and select End task.
Mac: Press Command + Option + Esc, select the browser, and click Force Quit.

That's it. Pop-up gone. But you're not done yet — the same pop-up will come back if you open the browser again.

Step 2 (Optional): Use Safe Mode Reboot

If the pop-up somehow stays after killing the browser (rare, but it happens with browser hijackers), restart your PC in Safe Mode with Networking:

Click Start, hold Shift, and click Restart.
On the blue screen, pick Troubleshoot > Advanced options > Startup Settings > Restart.
Press 5 for Safe Mode with Networking.
In Safe Mode, open your browser and see if the pop-up appears. It won't, because browser extensions are usually disabled in Safe Mode.

5-Minute Fix: Remove the Browser Hijacker

Most fake tech support pop-ups come from a sneaky browser extension or a "push notification" you accidentally allowed. Here's how to kick it out.

Check Browser Extensions

In Chrome or Edge, type this in the address bar:

chrome://extensions

Look for anything you don't recognize. Suspicious names like "Security Tool" or "Safe Search" or anything that showed up recently. Click Remove on each one. Don't be shy — remove everything you didn't install yourself.

Block Push Notifications

Scammers use push notifications to show these pop-ups even when the browser is closed. Here's how to stop them:

In Chrome:

Go to chrome://settings/content/notifications.
Under Allow, find any site that looks shady (like "random-security-alert.com").
Click the three dots next to it and choose Remove.
Better yet, toggle Don't allow sites to send notifications at the top.

In Edge:

Go to edge://settings/content/notifications.
Same deal — block all notifications or remove the bad ones.

Reset Your Browser Settings

If you're still seeing pop-ups, reset the browser completely. It wipes out extensions, cookies, and settings — but keeps your bookmarks and passwords.

In Chrome: chrome://settings/reset — click Restore settings to their original defaults.
In Edge: edge://settings/reset — click Restore settings to their default values.

15+ Minute Fix: Full Malware Scan

Sometimes the pop-up isn't just a browser thing — it's real malware that modified your DNS settings, added a scheduled task, or changed your hosts file. I've seen this with a tech support scam that kept coming back after browser reset. Here's the deep clean.

Step 1: Run Malwarebytes

Skip Windows Defender for this — it's not aggressive enough for these adware types. Get Malwarebytes (free version works fine).

Download Malwarebytes from malwarebytes.com.
Install it, then click Scan. Let it run — takes 10-15 minutes.
When it finds bad stuff, click Quarantine. Reboot when it asks.

Had a client last month with a fake pop-up that redirected to a number every 10 seconds. Malwarebytes found 18 infections — mostly browser hijackers and a keylogger. Clean in one scan.

Step 2: Check DNS Settings

Scammers sometimes change your DNS to a malicious server. Here's how to see if that happened:

Right-click the network icon in your system tray and pick Network & Internet settings.
Click Change adapter options.
Right-click your active network (Wi-Fi or Ethernet), choose Properties.
Double-click Internet Protocol Version 4 (TCP/IPv4).
If it says Use the following DNS server addresses with something weird like 8.8.8.8 (Google) or 1.1.1.1 (Cloudflare), that's fine. But if it's a random IP you don't recognize, switch to Obtain DNS server address automatically.

Step 3: Check the Hosts File

This is a file that overrides DNS for specific websites. Malware can add entries here to redirect you to fake support pages.

Open Notepad as administrator (right-click Notepad, choose Run as administrator).
Go to File > Open and paste this path:
C:\Windows\System32\drivers\etc\hosts
Look for lines that don't start with # and go to weird IPs. The only normal line is 127.0.0.1 localhost.
If you see stuff like 0.0.0.0 google.com or 123.45.67.89 microsoft.com, delete those lines. Save the file.

Step 4: Check Scheduled Tasks

Some malware adds a scheduled task that re-opens the pop-up after you close it.

Press Windows + R, type taskschd.msc, hit Enter.
Check Task Scheduler Library for anything suspicious — tasks with names like "BrowserHelper" or random strings.
Right-click and Disable or Delete any that look wrong. If you're not sure, Google the name first.

Final Check: Test It

After all that, restart your computer normally, open your browser, and go to a few real websites — Google, a news site, whatever. If the pop-up doesn't show up, you're good. If it does, you probably have a rootkit — that's a whole different level. Run Malwarebytes again, and if that fails, back up your files and wipe the system clean.

"I spent 3 hours on the phone with a fake Microsoft support guy before I realized it was a scam. Wish I'd seen this first." — Real comment from a client last year.

Don't panic. Just do the steps above. And next time, remember: Microsoft doesn't call you, and Windows doesn't pop up a phone number. If you see one, close the tab. End of story.