The Windows Defender Security Scan Scam

The “Windows Defender Security Scan” is a technical support scam that tricks users into believing their computer is at risk. The scam displays a fake Windows Defender Antivirus scan, falsely detecting security threats like “network breach” or “compromised network theft.” Victims are then urged to contact a fraudulent support number to resolve these issues.

Once users call, cybercriminals pose as Microsoft-certified technicians, convincing them to allow remote access to their device. This can lead to identity theft, financial fraud, and malware infections. Microsoft is not affiliated with this scam, and no website can detect security threats on a visitor’s system.

---

Threat Summary

Threat Name	“Windows Defender Security Scan” Scam
Threat Type	Phishing, Tech Support Scam, Social Engineering Fraud
Fake Claim	User’s computer is at high risk due to a network breach or malware infection
Disguise	Microsoft Windows Defender
Scammer Phone Numbers	+1-800-555-0199, +1 (800) 900-9990
Symptoms of Infection	Fake system alerts, pop-up warnings, browser hijacking, deceptive messages
Damage Potential	Financial loss, theft of sensitive data, malware infections, identity theft
Distribution Methods	Compromised websites, malicious pop-up ads, browser hijackers, spam emails, PUPs (Potentially Unwanted Programs)
Danger Level	High – Can lead to severe privacy and financial risks

---

How the “Windows Defender Security Scan” Scam Works

When users visit a scam website, they are shown a fake Windows Defender scan result. The page claims that the computer has multiple threats and provides a Microsoft Support phone number to resolve the issue.

Common Characteristics of the Scam:

• Fake system scans that always detect threats
• Pop-ups with urgent warnings like “Critical System Alert: Network Breach Detected”
• Fake Microsoft branding to appear legitimate
• A fraudulent support number urging users to call for assistance
• Scammers convincing users to allow remote access to their computer
• Demands for payment via untraceable methods (gift cards, cryptocurrency, wire transfers)

---

Pop-Up Message Displayed in the Scam

Windows Defender Security Scan

CRITICAL SYSTEM ALERT: NETWORK BREACH DETECTED

Immediate action required to prevent data loss

Contact Microsoft Security team: +1-800-555-0199

---

Dangers of Calling the Fake Support Number

If a victim calls the fake Microsoft support number, the scammers may:

• Gain Remote Access: Using tools like TeamViewer or UltraViewer, allowing them to control the victim’s computer.
• Install Malware: Introduce ransomware, trojans, or keyloggers to steal credentials.
• Steal Sensitive Data: Personal and financial details may be stolen and used for fraud.
• Charge High Fees: Victims are tricked into paying for fake support or useless security software.
• Demand Untraceable Payments: Payments via gift cards, Bitcoin, or cash-in-mail make refunds impossible.

---

How to Remove the “Windows Defender Security Scan” Scam

Step 1: Close the Scam Page

If the scam pop-up prevents you from closing it:

1. Press Ctrl + Shift + Esc to open Task Manager (Windows) or Command + Option + Escape (Mac).
2. End the browser process to force close the page.
3. Restart the browser, but do not restore the previous session.

Step 2: Uninstall Suspicious Programs

1. Windows:
   • Press Win + R, type appwiz.cpl, and hit Enter.
   • Look for unfamiliar programs and click Uninstall.
2. Mac: Open Finder > Applications and move suspicious programs to Trash.

Step 3: Remove Malicious Browser Extensions

1. Google Chrome: Go to chrome://extensions/ and remove unknown add-ons.
2. Mozilla Firefox: Open about:addons, remove suspicious extensions.
3. Microsoft Edge: Open edge://extensions/, uninstall rogue extensions.
4. Safari: Go to Preferences > Extensions, remove any unrecognized items.

Step 4: Reset Browser Settings

Google Chrome:

• Go to chrome://settings/reset, click Restore settings to their original defaults.

Mozilla Firefox:

• Type about:support, click Refresh Firefox.

Microsoft Edge:

• Open edge://settings/reset, click Restore settings to their default values.

Step 5: Scan for Malware with SpyHunter

1. Download and install SpyHunter.
2. Run a full system scan to detect and remove malware.
3. Follow the prompts to eliminate all threats.

---

Preventing Future Infections

Avoid Suspicious Websites

• Never click on pop-up alerts claiming security threats.
• Do not visit pirated software, torrents, or illegal streaming sites.

Block Pop-Ups

• Google Chrome:
  • Go to Settings > Privacy and security > Site settings > Pop-ups and redirects.
  • Select “Block”.
• Microsoft Edge:
  • Open Settings > Cookies and site permissions > Pop-ups and redirects.
  • Turn on “Block”.

Keep Software Updated

• Always update your OS, browsers, and security software.
• Enable automatic updates in Windows Security.

Use a Reliable Anti-Malware Tool

• Install SpyHunter for real-time protection.
• Enable firewall and anti-phishing settings.

Be Cautious with Remote Access Requests

• Never allow strangers to access your device remotely.
• If remote access was granted, disconnect from the Internet and uninstall any remote access software.

---

Conclusion

The “Windows Defender Security Scan” scam is a deceptive tech support fraud that can lead to identity theft, malware infections, and financial losses. By understanding how this scam operates and following proper removal steps, users can protect themselves from falling victim.

Key Takeaways

✔ Microsoft does not issue security warnings via pop-ups
✔ No website can scan your computer for threats
✔ Never call phone numbers from fake security alerts
✔ Use legitimate anti-malware tools like SpyHunter
✔ Stay cautious while browsing and downloading software

If you’ve encountered this scam, follow the removal guide above and secure your system to prevent further risks.