Fake Virus Alerts and Security Pop-Ups in Chrome: How to Tell Website Notifications from Malware

“Your computer is infected.” “Five viruses detected.” “McAfee subscription expired.” “Microsoft has blocked this PC.”

If one of these messages suddenly appears while you are browsing, do not panic—and do not call the phone number in the warning.

These alerts may not be antivirus detections at all. They are webpages or browser notifications designed to look like operating-system security warnings.

First question: where is the alert appearing?

The location tells you a lot.

An alert may be:

• Inside a Chrome tab.
• A browser pop-up window.
• A Chrome website notification in the Windows/macOS notification area.
• A notification from a browser extension.
• A real antivirus/security alert.
• A symptom of unwanted software installed on the computer.

Do not treat all six cases the same way.

If the warning is inside a webpage

A website cannot normally scan your entire Windows or Mac installation simply because you opened the page.

Scam pages often use fake progress bars, official-looking logos, warning sounds, countdowns, and browser-fullscreen tricks to imitate security software.

Close the tab.

If the page refuses to close normally, close Chrome through Task Manager on Windows or Force Quit on macOS, then reopen the browser without restoring the malicious tab.

Never call the support number in a browser virus warning

Legitimate Microsoft, Apple, Google, or antivirus warnings do not require you to call an unknown number displayed by a random website.

Tech-support scams often lead to remote-access software, fake repair charges, credential theft, or banking fraud.

Close the page and use the vendor’s official website if you genuinely need support.

Website notifications can appear even when Chrome is not visible

This is what confuses many users.

Chrome allows websites to request permission to send notifications. Once allowed, a site can produce desktop notifications that look much more “system-like” than an ordinary webpage.

Google explicitly classifies fake warnings, phishing, and malware-promoting browser notifications as abusive notification behavior.

Remove notification permission from the site

In Chrome on a computer:

1. Open Chrome.
2. Go to Settings.
3. Select Privacy and security > Site settings > Notifications.
4. Review sites allowed to send notifications.
5. Remove or block anything suspicious or unnecessary.

You can also open the suspicious site’s page-information controls and change its notification permission.

Should you disable all notifications?

You can, but it may not be necessary.

Legitimate calendar, email, collaboration, or news sites can use browser notifications usefully.

A better approach is to remove unknown sites and change Chrome’s default notification behavior to something more restrictive.

What if pop-ups keep opening?

Chrome blocks many pop-ups by default.

Google notes that if pop-ups continue even after pop-up blocking is enabled, you may have:

• Allowed site notifications.
• An unwanted extension.
• Unwanted software/malware.

That is the point where troubleshooting moves beyond one bad webpage.

Review Chrome extensions

Open:

chrome://extensions

Look for extensions you do not remember installing, extensions with vague names, or extensions installed around the time the problem began.

Remove suspicious extensions rather than merely disabling them temporarily.

Check whether the homepage or search engine changed

Google lists unexpected homepage/search-engine changes as a potential sign of unwanted software.

Open Chrome Settings and verify:

• Search engine.
• On startup pages.
• Extensions.
• Notification permissions.

Use Chrome Safe Browsing

Chrome’s Safe Browsing warns about known phishing, malware, malicious downloads, and social-engineering sites.

Do not disable Safe Browsing just because a download site tells you to.

Google explicitly warns that malicious actors may instruct users to bypass security warnings.

When should you scan the computer?

Run a real malware scan if:

• Chrome settings change again after you fix them.
• Unknown extensions return.
• Pop-ups appear outside the browser.
• Other apps show unexpected ads.
• Security software is disabled.
• The browser redirects even on trusted sites.
• The PC has new unknown software.

On Windows, use Windows Security/Microsoft Defender or your trusted installed security product.

On macOS, remove unknown software and use reputable security tools if there are signs of persistent unwanted software.

Reset Chrome only after checking extensions and software

Chrome can restore browser settings to their defaults.

This can fix hijacked search, startup pages, and configuration changes, but Google recommends checking for unwanted programs too.

A browser reset cannot remove a malicious desktop application that simply changes the settings again.

Do not install the “antivirus” offered by the warning page

This is a common scam path.

The site claims you are infected, then offers the software that supposedly fixes the infection.

Only install security software from the vendor’s official website or an official app store.

How to distinguish a real Chrome Safe Browsing warning

Chrome’s actual unsafe-site warning is generated by the browser and clearly identifies that the site may be dangerous.

It does not show a random phone number and demand immediate payment.

Google recommends not continuing to unsafe pages flagged by Safe Browsing.

What if the notification mentions a brand such as Norton or McAfee?

A logo proves nothing.

Check the notification source. Windows and macOS notification interfaces normally show which application generated a notification.

If the source is Chrome, investigate Chrome site notifications first.

The safest response to a scary warning

1. Do not click the warning.
2. Do not call the phone number.
3. Close the tab/browser.
4. Check Chrome notification permissions.
5. Review extensions.
6. Check browser startup/search settings.
7. Run a trusted malware scan if symptoms persist.

Most browser “virus alerts” succeed because they create urgency. Slow the situation down and identify who actually generated the message before you give anyone money, passwords, or remote access to your computer.

Official references

Google Support — Remove unwanted ads, pop-ups and malwareOfficial reference Google Support — Manage website notificationsOfficial reference Google Support — Warnings about unsafe sitesOfficial reference