Verifying "Microsoft" message.

Question

Screen pop up claims to be from Microsoft saying my computer has an identity theft breach. Is this true? If not, how do I remove it?

Answer 1

Can you please hold down Ctrl+Alt+Del, then launch Task Manager, and then end all browser items there to close it. That page is definitely scam, but as long as you didn't call the number and engage in any of the requested activities, your computer is not hacked. It is just a pop up page that can have some audio effect (sometimes) and display in full screen mode, so it appears the computer is locked.

Scammers use various methods to trigger these pop-ups. Pop-ups are a form of online advertising. They are often integrated into websites or applications through ad services. Many websites use third-party advertising services to display ads. Sometimes, these ad services might inadvertently allow scam ads to be displayed. This does not mean the website itself is malicious, but it indicates a lack of stringent ad vetting.

You can read more about this type of support scam here: https://support.microsoft.com/en-us/windows/protect-yourself-from-tech-support-scams-2ebf91bd-f94c-2a8a-e541-f5c800d18435

Answer 2

The pop-up is almost certainly a tech support scam and not a genuine Microsoft message.

Microsoft error or warning messages do not include a phone number to call, and Microsoft does not proactively alert about “identity theft breaches” via browser pop-ups.

To remove and avoid it:

1. Close the fake pop-up
   • Try closing the browser tab or window normally.
   • If it won’t close:
     • Press Alt + F4 to close the window, or
     • Press Ctrl + Shift + Esc to open Task Manager, select the browser (e.g., Chrome/Edge), and choose End task, or
     • Restart the computer if needed.
2. Do not interact with the scam
   • Do not call any phone number shown.
   • Do not click any buttons or links in the pop-up.
   • Do not give remote access, passwords, or payment details.
3. Check and clean the browser
   • Reopen the browser.
   • Clear cache and site data (this helps remove the malicious page from history and sessions).
   • Remove any unfamiliar extensions/add-ons.
4. Scan the PC and update
   • Run a full scan with Windows Security to check for malware.
   • Install all available Windows updates.
5. If any information was shared
   • Follow the guidance under “What to do if a tech support scammer already has your info”: uninstall anything they asked to install, consider resetting the device if they had access, run a full malware scan, apply updates, change passwords, and contact card providers if any payment was made.
6. Report the scam
   • Report the attempted scam at https://microsoft.com/reportascam so it can be investigated.

For future protection, remember:

• Microsoft does not send unsolicited emails or make unsolicited phone calls to provide support or request personal/financial information.
• Genuine Microsoft error messages never include a phone number.
• If a pop-up or error message appears with a phone number, do not call it.

---

References:

• Avoid and report Microsoft technical support scams
• Protect yourself from online scams and attacks
• Protect yourself from tech support scams