Fake Antivirus Pop-up Telling You to Call Support
A browser page flashes a loud virus warning with a helpline number or an 'install cleaner' button. It is an advertisement trap, not a real scan.
While reading an article or watching a clip, a page fills your screen with red warnings. It says your phone has 14 viruses, your SIM will be blocked or your photos will be deleted. A button says 'Clean now' and a number says 'Call certified support'. The page is simply an advertisement or a script. Websites cannot scan your phone, and neither the button nor the number is real security help.
How the scam works
The set-up is a web page, often reached from a free movie site, a short link or a redirect from an ad. It uses scripts to fill the screen, vibrate the phone or play a siren sound. Fake scanning bars and counters show frightening figures. The logo of a well-known security brand is copied to make the warning appear official, and the page may try to stop you from closing the tab.
The pressure is a countdown. The page claims that data will be deleted in a few minutes unless you act. One path leads to a download button that installs an app packed with ads or tracking. The other path is a helpline number that connects to a person who offers 'remote cleaning', asks for a service fee, or takes you through the remote-access trick to reach your banking apps.
The payoff may be a paid subscription for a useless cleaner, a stream of ads and notifications, access to personal data through broad permissions, or a direct theft through screen sharing. Because the page behaved as if your phone were truly infected, victims often feel ashamed and do not report. Others later see the same pop-up come back through notification permissions they granted.
An example of what you may see
Example pop-up text (invented): 'WARNING! 14 viruses found on your device. Your SIM card will be blocked and photos deleted in 04:59. Tap CLEAN NOW or call certified support immediately to remove them.' On the call the agent says, 'Madam, a cleaning service is Rs 2,499 and I will need to connect remotely to your phone to remove the damage.' The page also plays a siren and vibrates your phone, and the call button stays pinned at the bottom of the screen.
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- A web page claims to have scanned your phone, which websites cannot do.
- The message uses loud sounds, a countdown and threats about your SIM or photos.
- A button offers an instant clean and a number offers certified support.
- The page makes it hard to close or sends you to an app download.
- A fee is asked for cleaning, or a remote tool is suggested.
- The warning appears while browsing a free-movie or random site.
What to do right now
- Close the tab, or close the browser from the recent apps list, without tapping any button.
- Clear the browser's history and cache from its settings.
- Do not call the number or install an app from the page.
- If a download completed, remove it and check the permissions it was given.
- Use only an app from a store you trust, installed on your own initiative.
If you already paid or shared a code
- If you paid by card or UPI, call 1930 and report at cybercrime.gov.in.
- Tell your bank using the number on your card and ask them to block the card if you shared details.
- Uninstall any cleaner or remote-access app you installed and change passwords from another device.
- Keep screenshots of the page, the number called and the payment.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
Phone scan in Safeavio Sentinel reviews installed apps, requested permissions and risky settings, and it shows what looks wrong in plain words, so you can judge a cleaner app that was pushed at you. Link check can test a suspicious link before you open it. A web page cannot truly scan your phone, and Safeavio does not remove malware by magic; it tells you what looks wrong and how to fix it.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
Can a website really find viruses on my phone?
No. Browsers do not let a web page scan your apps or files. A page that claims to have found viruses is an advertisement or a script designed to scare you. They only work on files you give them, so a pop-up claiming it scanned your whole phone is a bluff.
Why does the warning keep coming back?
You may have allowed notifications from that site, or an app you installed is showing ads. Remove the site's notification permission and uninstall any recent cleaner app. Check your notification settings and remove any site you do not recognise.
Is calling the number safe if I do not give anything?
It is better not to call. The person will try to build trust, sell a useless service or ask you to share your screen. Close the page and move on. Staying calm and closing the tab is the best response.