New Virus Warning? How to Tell a Real Threat From a Scam (2026)

If you searched “new virus” because something on your screen just told you your device is infected, treat it as a scam until proven otherwise: real security software does not show pop-ups with a phone number to call, and you can check your device safely yourself in a few minutes. If you meant a new biological virus in the news, the reliable place to check is the World Health Organization’s outbreak updates, not a YouTube thumbnail.

Below we cover both, with the focus on what we know best: telling real digital threats from fake ones, and what to do next.

Why “new virus” alerts are so often fake

Scammers love the word “virus” because it creates panic, and panic makes people skip steps. The FTC describes the pattern clearly in its alert on urgent security messages: a pop-up, call, text, or email claims your computer is infected and pushes you to call a number or click a link right away.

Two facts make most of these easy to spot:

• Microsoft’s real warnings don’t include phone numbers. According to Microsoft Support, its error and warning messages never contain a phone number, and Microsoft won’t call you out of the blue to offer support.
• Legitimate companies don’t ask you to call about viruses in a pop-up. The FTC says the same about any reputable company, not just Microsoft.

Common red flags

The fake CAPTCHA trick deserves special attention. It doesn’t look like a virus warning at all; it looks like a routine “prove you’re human” check. Following its steps pastes and runs a command the attacker put on your clipboard. If a web page ever asks you to open the Run box or a terminal and paste something, close it.

What to do if a virus warning pops up right now

1. Don’t call, click, or pay. Ignore any phone number or button in the warning. The FTC’s advice is simply to stop.
2. Close the browser. If the page won’t close or has gone full screen, open Task Manager on Windows (Ctrl + Shift + Esc) and end the browser task. Closing and relaunching the browser usually clears the fake warning. Microsoft’s Defender documentation on support scams explains how these pages work.
3. Don’t restore the old session. When you reopen the browser, decline any prompt to reopen previous tabs.
4. Update your security software and run a full scan. On Windows that can be the built-in Microsoft Defender Antivirus; on any platform, use the security tool you already trust, opened from your own device, not from a link.
5. Report it. In the US, report the scam at ReportFraud.ftc.gov and include the phone number shown. Microsoft also takes reports at microsoft.com/reportascam.

A browser pop-up on its own usually means you landed on a bad page or clicked a malicious ad, not that your computer is infected. The scan in step 4 is how you confirm.

Signs your device may actually be infected

The FTC’s malware guide lists the signs worth taking seriously:

• Your device suddenly slows down, freezes, or crashes often
• Your home page changes or you keep getting redirected
• New toolbars, extensions, or add-ons appear that you didn’t install
• A flood of pop-ups, even on sites that never showed them before
• Repeated, unexpected error messages from the operating system
• System tools such as Task Manager are disabled
• Friends receive emails or social posts from you that you didn’t send

One of these alone isn’t proof. Several together, or anything affecting your accounts, is a reason to act.

How to clean up if you think you’re infected

The FTC recommends this order:

1. Stop logging in to sensitive accounts (banking, shopping, email) on the affected device.
2. Update your security software and run a full scan. Let it quarantine or remove what it finds.
3. Change your passwords from a different, clean device, starting with email and banking.
4. Turn on two-factor authentication wherever it’s offered, so a stolen password alone isn’t enough.
5. Get help if it persists. Contact your device maker, a tech support company you already trust, or a knowledgeable friend. Find contact details yourself on the official website, never from a pop-up.

If you already called the number or gave someone access

This happens to careful people too. Act quickly:

1. Disconnect the device from the internet.
2. Uninstall any remote-access software the “technician” had you install, then run a full scan. Microsoft warns that once you install such software and share credentials, your computer and personal data are exposed.
3. Change any passwords you shared or typed during the call, from another device.
4. If you paid, call your bank or card issuer and ask to dispute or reverse the charge.
5. Report it to the FTC (or your country’s equivalent).

The FTC also flags a newer twist: scammers claim your bank or investment account has been hacked and pass you to a fake bank or government “agent” who tells you to move money to keep it safe. No real agency or bank will ask you to do that. Call your bank on a number you already know.

How to avoid the next one

Most infections and scams come in through a handful of routes, according to the FTC:

• Keep your operating system and browser updating automatically. Patches close holes attackers rely on.
• Download software only from sites you know and trust, and be wary of software ads on social media and search results.
• Avoid sites offering free movies, music, or games, and skip peer-to-peer downloads; they’re a common way malware gets bundled in.
• Treat unexpected links and attachments as suspicious, even from people you know.
• Scan USB and external drives before opening files from them.

A note on VPNs, since that’s much of what we test: a VPN encrypts your traffic and hides it from your network provider, which is useful on public Wi-Fi. It does not stop you from running a malicious file or following a fake CAPTCHA’s instructions. Some VPN apps bundle ad or tracker blocking, which can reduce exposure to bad ads, but don’t treat that as antivirus.

If you meant a new biological virus

YouTube suggestions for “new virus” also pull in health news, and health scares are a favorite hook for clickbait and scam emails alike. Go to primary sources:

• The WHO’s Disease Outbreak News pages are the official record of outbreaks it is tracking. As of mid-October 2026, its most recent updates cover the outbreak of Ebola disease caused by Bundibugyo virus in the Democratic Republic of the Congo, which WHO declared a public health emergency of international concern in May 2026, including a confirmed imported case reported in Kenya in early October.
• For guidance on what it means where you live, check your national public health agency.

Case counts and risk assessments change quickly, so rely on the latest official update rather than figures quoted in videos. And be careful with emails or texts that use outbreak news as bait for “updates,” “testing kits,” or donation links; the same rules apply: don’t click, go to the official site yourself.

The short version

A “new virus” warning that shows a phone number, demands payment, or tells you to paste commands is a scam. Close it, scan your device with software you trust, and report it. For real-world outbreaks, skip the videos and check the WHO or your health agency directly. Details on specific scams and outbreaks change constantly, so this guide reflects official guidance as of October 2026.