Fake Antivirus Pop-up Telling You to Call Support through an app

How it looks through an app, the red flags and what to do.

The app is the scammer's way in: it can read what is on the screen, collect contacts and push you to pay. Fake Antivirus Pop-up Telling You to Call Support is one of the ways this shows up: A browser page flashes a loud virus warning with a helpline number or an 'install cleaner' button. It is an advertisement trap, not a real scan.

What fake antivirus pop-up telling you to call support looks like through an app

• An .apk file sent on WhatsApp or by SMS.
• An app outside the official store that asks for many permissions.
• A screen-sharing or remote-control app that a caller asks you to install.

The set-up is a web page, often reached from a free movie site, a short link or a redirect from an ad. It uses scripts to fill the screen, vibrate the phone or play a siren sound. Fake scanning bars and counters show frightening figures. The logo of a well-known security brand is copied to make the warning appear official, and the page may try to stop you from closing the tab.

Red flags to check on the app

• A web page claims to have scanned your phone, which websites cannot do.
• The message uses loud sounds, a countdown and threats about your SIM or photos.
• A button offers an instant clean and a number offers certified support.
• The page makes it hard to close or sends you to an app download.
• It asks for accessibility, screen overlay, SMS or contacts without a clear reason.
• You were told to install it by a stranger or a caller.

What to do

1. Close the tab, or close the browser from the recent apps list, without tapping any button.
2. Clear the browser's history and cache from its settings.
3. Do not call the number or install an app from the page.
4. Call your bank, and call 1930 if money moved.
5. Do not install it. If it is installed, uninstall it now (Settings, Apps).
6. Open Settings and check Accessibility, Device admin apps and Install unknown apps for anything you do not recognise.

Report the fake app to the store it came from and, if money moved, call 1930 and report at cybercrime.gov.in.

If money or a code is already gone

1. If you paid by card or UPI, call 1930 and report at cybercrime.gov.in.
2. Tell your bank using the number on your card and ask them to block the card if you shared details.
3. Uninstall any cleaner or remote-access app you installed and change passwords from another device.
4. Keep screenshots of the page, the number called and the payment.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Phone scan in Safeavio Sentinel reviews installed apps, requested permissions and risky settings, and it shows what looks wrong in plain words, so you can judge a cleaner app that was pushed at you. Link check can test a suspicious link before you open it. A web page cannot truly scan your phone, and Safeavio does not remove malware by magic; it tells you what looks wrong and how to fix it.

Full guide: Fake Antivirus Pop-up Telling You to Call Support: how it works, signs and what to do. Other channels: social media, phone call, SMS.

Questions