Fake Pop-up Warning Tech Support Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 28, 2026

Severity: HIGH | View Full Scam Details

Beware the 2026 Fake Pop-Up Warning Tech Support Scam in India: How to Stay Safe

Every day, millions of Indians use smartphones and laptops to manage bank accounts, shop online, and connect with loved ones. But lurking behind seemingly normal websites and apps is a high-risk trap called the Fake Pop-up Warning Tech Support Scam that aims to steal your money and data.

What Is the Fake Pop-up Warning Tech Support Scam?

This scam tricks people by showing fake pop-up messages on their phone or computer screen. These pop-ups look like urgent security warnings, often claiming your device is hacked, infected with viruses, or your Aadhaar, UPI apps, WhatsApp, or bank accounts are at immediate risk. The scammers design these messages to look official and frightening, pressing users to act fast.

In India, where internet penetration has reached hundreds of millions and digital payments via UPI are mainstream, fraudsters see a huge opportunity. They exploit worry around cyber threats by impersonating government or bank alerts to coerce users into calling a fake “tech support” phone number. Once contact is made, victims are pressured to share sensitive information or pay for fake services.

Such scams are widespread across India’s urban and semi-urban areas. CERT-In (Indian Computer Emergency Response Team) and the Indian government’s I4C cybercrime portal have issued alerts warning against such fake tech support scams due to their growing reports and high financial losses. RBI also advises users to beware of unsolicited calls claiming technical issues with banking or UPI apps.

How This Scam Works — Step by Step

1. Browsing a website or clicking a link: The victim visits a site, sometimes legitimate but compromised, or clicks on a link in WhatsApp/ SMS.
2. Fake pop-up appears: A full-screen message instantly blocks access, flashing warnings such as “Your Aadhaar details have been compromised!” or “Virus detected — your UPI app is unsafe!”
3. Preventing easy closure: The pop-up disables the browser’s close button, sometimes generating loud alarms or threatening messages on-screen to panic the user.
4. Phone number displayed: The message urges, “Call this number immediately to fix the issue” — often an Indian phone number starting with 98XXXXXX12.
5. User calls the number: The victim connects to a “tech support agent” who claims they can resolve the problem.
6. Pressure to share information or pay: The caller requests remote access to the device, Aadhaar details, OTPs, or UPI PINs. They may ask for upfront payment via bank transfer or UPI apps for “software cleanup” or protection.
7. Loss of money and data: Once scammers get sensitive data or funds, they may make fraudulent transactions, steal identities, or misuse Aadhaar and bank accounts.

Real Warning Signs to Watch For

• Pop-ups that prevent you from closing your browser or app normally
• Messages claiming urgent threats to Aadhaar, UPI apps, WhatsApp, or bank accounts with high pressure to call immediately
• Phone numbers on screen asking you to call “tech support” or “security team”
• Requests to share OTPs, UPI PINs, or install remote access apps over the phone
• Unsolicited pop-ups appearing without you visiting official government or bank portals
• Loud alarms or flashing colours to scare you into quick action
• Agents refusing to provide verifiable company details or official email IDs when you call

What Happens to Victims

People caught in this scam often suffer financially as money is transferred directly through UPI or bank apps without easy reversal. Unlike ATM or credit card fraud, UPI transactions are quick and irrevocable, leaving victims helpless. Fraudsters may also misuse Aadhaar numbers for fake KYC, loans, or SIM swaps, causing prolonged identity theft issues.

Emotionally, victims face distress from losing hard-earned savings and fear over compromised personal data. The fast, aggressive pressure during calls makes many freeze and comply with demands. For vulnerable users in smaller towns and older adults unfamiliar with digital safety, this scam causes serious harm.

What RBI and CERT-In Say

The Reserve Bank of India has repeatedly cautioned users to never share OTPs, UPI PINs, or bank passwords over phone calls, emails, or SMS. RBI helpline (call 1800-112-111) is available for queries related to suspected frauds.

CERT-In issues advisories reminding users to verify website URLs carefully, avoid clicking unknown links, and not respond to unsolicited calls claiming to resolve security issues. The 1930 cybercrime helpline is functional 24x7 to report such frauds via cybercrime.gov.in.

I4C’s (Indian Cyber Crime Coordination Centre) national portal also encourages citizens to register complaints online with detailed evidence. These multiple arms of India’s digital security ecosystem emphasize awareness to reduce success of fake tech support scams.

How to Protect Yourself

1. Never call a phone number displayed on sudden pop-up warnings; official organisations do not use pop-ups to communicate urgent actions.
2. Close the browser or app by force: use device home button or task manager if needed; do not interact with the pop-up.
3. Do not share OTPs, PINs, passwords, or remote access permissions with anyone over phone or chat.
4. Verify alerts by visiting your bank or government website directly rather than clicking on links in messages/pop-ups.
5. Keep software, antivirus, and apps updated on your device to block malicious scripts causing fake pop-ups.
6. Use Google Chrome or trusted browsers that provide built-in warnings against suspicious websites.
7. Immediately block and report any suspicious number that calls claiming to be tech support for your Aadhaar, UPI, or bank accounts.

What to Do If You’ve Been Targeted

• Contact your bank or UPI app support immediately to freeze or block your account or UPI ID to prevent further transactions.
• Report the fraud to your local police cyber cell and register a complaint at cybercrime.gov.in.
• Call the 1930 cybercrime helpline to seek assistance and inform about the incident.
• File a complaint with the Reserve Bank of India through their grievance portal if bank fraud occurred.
• Change all passwords related to your Aadhaar-linked services, online banking, and WhatsApp promptly.
• If you shared Aadhaar details, consider using UIDAI’s official portal to lock your Aadhaar authentication temporarily.
• Inform family and friends about the incident to help them avoid falling prey.

Frequently Asked Questions

Q: Can these fake pop-ups harm my device technically?
A: The pop-ups themselves usually are scripts running in your browser, they don’t directly infect your device with viruses. But if you follow their instructions to install remote software or apps, that’s when actual malware could be installed.

Q: How can I recognize a genuine alert from UIDAI or my bank?
A: Official alerts come through registered channels like SMS from verified sender IDs or emails from official domains. They never ask you to call strange phone numbers or share sensitive OTPs/PINs over phone calls.

Q: Will UPI transactions made by scammers be reversed by banks?
A: Generally, UPI payments are instant and final. Banks rarely reverse transactions unless fraud is reported immediately with proof. That’s why quick reporting is critical.

Stay cautious, don’t panic at pop-ups, and always verify before you act. If you want to check suspicious messages or calls, visit BharatSecure.app for trusted information and report fraud at India’s 1930 helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.