Short answer
Scammers impersonate well-known security brands because the name creates instant trust. A McAfee-branded alert that appears while you are browsing, tells you your subscription has expired and gives you a phone number to call, did not come from McAfee.
What you are actually looking at
McAfee is a legitimate company and its software does show notifications. The messages people bring to us, though, follow a very different pattern: they appear inside a web browser, they are urgent, they claim a subscription lapsed or that several viruses were detected, and they push you towards a phone number or a download. That combination is impersonation. Nobody at McAfee is involved.
| Type of message | How to recognise it |
|---|---|
| Genuine security software notification | Appears from the Windows notification area or the program's own window, no phone number, no countdown, doesn't disappear when you close the browser |
| Browser notification spam | Slides in from the corner even when the site isn't open, because a website was granted permission to send notifications |
| Malicious advertisement | Appears while browsing, often on free streaming or download sites, disappears when the tab is closed |
| Fake full-screen webpage | Takes over the whole screen, may play a warning sound, tries to block you from closing the tab |
| Unwanted browser extension | Popups follow you across every site and survive a restart; check the browser's extension list |
| Actual malware on the machine | Popups appear even with the browser closed, alongside slowdowns, unfamiliar programs or changed settings |
What not to do
The phone number is the whole point of the popup. Everything else is decoration designed to get you to dial it. Once you call, the script moves to remote access, then to invented findings on your machine, then to payment — and often to a fake refund routine that ends with money moving out of your account rather than into it.
Clearing it safely
- 1
Close the tab or the browser
If the page blocks the close button, open Task Manager with Ctrl+Shift+Esc, select the browser and choose End task.
- 2
Don't restore the tabs
When the browser reopens and offers to restore your previous session, decline. Otherwise you reload the same page.
- 3
Turn off the site's notification permission
In your browser settings, find notifications under site settings or privacy, and remove permission for anything you don't recognise. This is what causes alerts that appear when you aren't even browsing.
- 4
Review your extensions
Open the browser's extensions or add-ons list and remove anything you didn't deliberately install, especially recent additions or anything offering coupons, search enhancement or system cleaning.
- 5
Check installed programs
In Windows Settings, look at Installed apps sorted by install date. Unfamiliar 'cleaner', 'optimiser' or 'driver updater' software installed around the time the popups started should come off.
- 6
Run a scan with reputable security software
Use the protection you already have, or Windows Security which is built in. Do not download a scanner that a popup recommended.
- 7
Check your real subscription status directly
If you do pay for McAfee, open the software from the Start menu or sign in at the vendor's own website by typing the address yourself. Never through a link or number in a popup.
If you already called or gave them access
This happens to careful people, and speed matters more than embarrassment. If you let someone connect to your computer, assume they had the run of it while connected.
- Disconnect the machine from the internet.
- Contact your bank or card provider straight away if any payment or refund process was involved.
- Change passwords for email and banking from a different, trusted device.
- Assume any remote-access tool they installed is still there until it is properly removed.
Our guide on what to do after someone remotely accessed your computer covers the clean-up in detail, and it is the right next read if you got that far.
Getting it properly checked
If popups persist after clearing extensions and notifications, if the browser behaves oddly afterwards, or if remote access happened, bring the machine to the counter in Bellevue. We remove the software properly, check what was left behind, and confirm the browser is back to normal rather than just quiet for a day. Consultations are free.
Common questions
- Is the McAfee popup a virus?
- Usually not. Most are webpages, advertisements or abused browser notifications rather than software installed on your machine. Popups that continue with the browser fully closed are the ones that suggest something is actually installed.
- How do I know if my McAfee subscription really expired?
- Open the software from your Start menu, or type the vendor's web address in yourself and sign in. Never use a number, link or button from a popup.
- I called the number but hung up before anything happened. Am I at risk?
- If you gave no payment details and nobody connected to your computer, the risk is low. Expect follow-up calls, though — numbers that engage get called back.
- Why do these popups keep coming back?
- Most often because a website still holds notification permission, or because an extension or unwanted program is generating them. Both need removing rather than just closing the window.
The service that covers this
Virus, Spyware & Adware Removal
Infections cleaned out properly — registry, temp files, browsers, and hidden leftovers.
Virus, Spyware & Adware Removal in Bellevue →Optional next step
After we clean it up, keep it protected.
Ask us about Home-IT for ongoing protection, monitoring and remote support — an optional extra layer of help when something looks wrong.
Learn About Home-IT →Related guides
- Fake Norton Popup: How to Recognise the ScamNorton-branded renewal warnings, invoices and virus alerts in your browser are impersonation, not messages from Norton. Here is how to spot them and remove what is producing them.
- Fake Virus Warning Popups: What They Are and What To DoA full-screen warning says your computer is infected and gives you a phone number. Here is how to tell a scam page from a genuine alert, and what to do next.
- Browser Keeps Redirecting to Strange WebsitesUnexpected redirects, a search engine you didn't choose, new tabs opening on their own and constant popups usually come from an extension, adware or changed browser settings.
- What To Do If Someone Remotely Accessed Your ComputerWhether it was a scam caller, a stranger or an ex-partner, remote access needs the same response: cut the connection, secure accounts, and check what was left behind.