Fake virus pop-up or 'Apple' call? Mac tech support scams

Steps

1. 01

   Don't call, don't click, don't pay

   Apple says pop-ups warning of viruses on your device are scams, and that it never asks for your password, passcode or two-factor code

   • Do not ring the number or press any button inside the pop-up
   • If you are on the phone with them, hang up — Apple's own advice is 'just hang up'
   • Never let a caller connect to your Mac, never read out a code, and never pay for a 'fix'
2. 02

   Close the pop-up without touching it

   • Close the tab or the whole window, as Apple advises
   • If it will not close, press Option+Command+Esc, select the browser and choose Force Quit
   • Hold the Shift key while you open Safari again, so it does not reopen the same tabs
   • In another browser, if it offers to restore your previous pages, choose not to

   ✓You should see: The browser opening on an ordinary page, with no alert.

   Why?

   The pop-up is a web page built to fill the screen. A web page cannot scan your Mac, so nothing it says about your files is true.

   Also see: Force-quit a frozen app

3. 03

   If you only saw it, or only spoke to them

   • Closing the page or hanging up is enough — nothing was installed
   • If pop-ups keep coming back on ordinary sites, that is adware rather than this scam, and it has its own fix

   Also see: Pop-ups and hijacked search on your Mac: remove the adware

4. 04

   If you called them or let them connect, cut them off first

   • Turn Wi-Fi off from the menu bar, or unplug the network cable
   • Finder›Applications: move anything they had you install to the Trash — AnyDesk and TeamViewer are the usual two
   • Apple menu›System Settings›General›Login Items & Extensions, and remove anything left behind by it
   • System Settings›General›Sharing: make sure Screen Sharing, Remote Management and Remote Login are off
   • System Settings›Privacy & Security›Accessibility, then Screen Recording (called Screen & System Audio Recording on newer macOS): remove the app from both lists
   • Reconnect, update macOS and restart

   Also see: Think your Mac has malware? What to check

5. 05

   Then protect your money and your accounts

   • If you paid, or gave card or bank details: phone your bank now on the number on your card, and ask them to stop the payment and replace the card
   • Change your Apple Account password and check two-factor authentication is on, then your email and banking passwords, from a different device
   • Report it to Report Fraud, which replaced Action Fraud, at reportfraud.police.uk or on 0300 123 2040 — it covers England, Wales and Northern Ireland; in Scotland, call Police Scotland on 101

   Why?

   Report Fraud replaced Action Fraud on 4 December 2025; the phone number, 0300 123 2040, did not change. It takes reports from England, Wales and Northern Ireland. In Scotland, report to Police Scotland on 101.

   Also see: Think someone got into your accounts? Lock them down on Mac