McAfee Pop-Ups in Chrome: Is It a Scam? (and How to Stop Them)

You're browsing in Google Chrome and a McAfee pop-up appears: "Your subscription or licence has expired," or "5 viruses detected on this device — act now." There's often a countdown, a scary red banner, and a phone number to call. So is it real?

In almost every case, no — it's a scam. To be clear, McAfee itself is a real, legitimate antivirus company — but this pop-up is not a message from McAfee, and it usually has nothing to do with whether you even have McAfee installed. It's a type of fake-alert scam (sometimes called "scareware" or a "tech-support scam"), and the goal is to panic you into calling a fake support line, handing over card details, or installing software that gives a stranger control of your computer.

How to tell it's a fake McAfee pop-up

Real security software runs quietly in the background — it doesn't hijack your web browser. A pop-up is almost certainly a scam if it shows any of these signs:

• It appears inside a web page or as a browser notification (not from an app on your computer).
• It uses pressure and fear — a countdown timer, "act now", or "your computer will be blocked".
• It gives a phone number to call for "support" or "to renew".
• The web address in the bar is not mcafee.com — it's a random or misspelled domain.
• It claims to know an exact number of viruses — a website cannot actually scan your computer.

Why does McAfee keep popping up on Chrome?

If McAfee keeps popping up — the alerts come back even when you're not actively browsing, or they slide in from the corner of your screen — there are two usual culprits:

1. Browser notifications you accidentally allowed. This is the most common cause of repeat pop-ups. At some point you clicked "Allow" on a website's "Show notifications?" request (often on a dodgy streaming, download, or "you've won" site). That site can now push fake McAfee alerts straight to your desktop through Chrome. Turning that permission off stops them for good — steps below.

2. A malicious ad or redirect. A single bad ad or a redirect on a sketchy site can throw up a full-screen fake alert. This one is usually a once-off — closing the tab fixes it — unless you also granted notifications.

Less often, an unwanted browser extension or "PC cleaner" app is generating them. We cover removing those below too.

How to get rid of McAfee pop-ups in Chrome

Step 1 — Close it safely Don't click any button inside the pop-up. Close the browser tab. If a full-screen alert won't let you close it, quit Chrome entirely — on Windows press Ctrl + W to close the tab, or open Task Manager (Ctrl + Shift + Esc) and end Chrome; on a Mac press Cmd + Q or use Force Quit (Cmd + Option + Esc). When you reopen Chrome, don't click "Restore" — that just reloads the bad page.

Step 2 — Turn off the website's notifications This is the real fix for pop-ups that keep returning. In Chrome:

• Click the ⋮ menu (top-right) → Settings.
• Go to Privacy and security → Site Settings → Notifications.
• Under "Allowed to send notifications", look for any site you don't recognise (random letters, a fake "alert" or "news" site).
• Click the ⋮ next to it and choose Remove or Block.

On Android, the path is Chrome → ⋮ → Settings → Notifications / Site settings → Notifications and block the offending site the same way.

Step 3 — Remove dodgy extensions Go to chrome://extensions (paste it into the address bar) and remove anything you didn't deliberately install, especially "cleaners", "coupon" or "search" add-ons.

Step 4 — Clear the site's data In Settings → Privacy and security → Clear browsing data, clear cookies and cached files. This removes anything a bad site left behind.

Step 5 — Scan with real antivirus Run a scan with antivirus you trust. On Windows, Microsoft Defender is built in and free (Settings → Privacy & security → Windows Security → Virus & threat protection → Quick scan). This confirms nothing actually installed itself.

What if I already called the number or paid?

If you got further than the pop-up itself, act quickly — but don't panic. The most damaging step is giving someone remote access to your computer (they'll have asked you to install something like AnyDesk, TeamViewer or "UltraViewer"). If that happened:

• Disconnect from the internet (turn off Wi-Fi / unplug the network cable) to cut their access.
• Uninstall any remote-access tool they had you install.
• Change your important passwords — email and banking first — from a different, trusted device, and turn on multi-factor authentication.
• If you paid or gave card details, contact your bank immediately to stop the payment and protect the card.
• In New Zealand, report it to CERT NZ and Netsafe — both offer free guidance.
• Have the device checked properly before you trust it with anything sensitive again.

The bottom line

A McAfee pop-up in Chrome is a scare tactic, not a real virus warning. Close it, switch off the notification permission that's feeding it, run a quick scan, and you're done. The scammers are betting on the fright making you skip those simple steps — don't give them the satisfaction.

If it's happening on a work computer, or you're not sure whether something got onto the device, it's worth getting a proper look rather than guessing.