The short answer
Pause before responding to a frightening phone warning. Close the affected browser tab using the browser’s controls, then check any recurring website notifications through settings opened independently. If your parent entered a password or code, installed software, granted access or paid, move to the relevant official recovery route; closing a page cannot undo those actions.
In this guide 10 sections
What to keep in mind
- 1A logo, countdown or apparent virus scan on a webpage does not establish a diagnosis.
- 2Use Safari or Chrome’s tab controls, not a close, cancel or repair button inside the warning.
- 3Website notifications and browser pop-ups have different permission controls.
- 4Preserve familiar tabs and account access; clearing everything is not the first step.
Watch together · 0:49
Close a suspicious Safari tab
A warning page can contain a fake close button. See how to use Safari’s own tab controls to close the affected tab.
Watch on Haven & Signal, with the full transcript →
iPhone and Safari · 49 seconds · Simplified example. This video covers browser pop-ups. If you shared a password or code, installed something or paid, continue with the recovery steps in this guide.
Choose Load video to connect to YouTube. The player uses YouTube’s privacy-enhanced mode. Google receives connection information when it loads. About video privacy.
Read the video transcript
Virus warning on your parent's iPhone? Even the close button could be fake. Don't call, pay, or install anything from that pop-up. Close the browser tab, not the warning. In Safari's compact layout, tap More, then All Tabs. Using the top or bottom layout? Tap the Tabs button. In the tab overview, close the affected tab using the X at its upper right. Don't reopen it. Already shared a password or code, installed something, or paid? Closing the tab won't undo that. Save this for your family. Get the next steps in our free scam pop-up guide at Haven and Signal dot com.
Music: “Reverie” by Scott Buckley, CC BY 4.0. Excerpt with fades and reduced volume under narration. Full visual credits are in the YouTube description.
01
Pause the pressure and ask what happened#
A loud warning saying the phone is infected can be frightening. Tell your parent they can pause without following its countdown. Ask permission to help, and use a familiar contact route. Avoid blame: you need a clear account of what happened, including anything already tapped or shared.
Do not call the displayed number, pay for a repair, install an offered cleaner, share a verification code or grant remote access. Apple warns that browser alerts about viruses can be fraudulent advertisements. The FTC identifies demands to call a number from a security pop-up as a tech-support scam tactic.
Ask whether they only saw the page, or also entered information, downloaded or installed something, allowed notifications, spoke to someone or paid. Those answers determine the next step.
02
Check where the warning comes from#
A webpage can imitate a familiar company’s branding and present an alarming message. A website notification is different: Chrome can deliver messages from sites with notification permission. Neither a logo nor the appearance of a phone notification proves that the operating system diagnosed an infection.
Leave the suspicious message and open the relevant settings or official account app independently, using its familiar icon. In Chrome, More > Settings is the browser’s own route to permissions and safety controls. If an alert claims an account problem, use that provider’s official account-security page rather than its link.
Real browser protections also warn about dangerous sites. Do not disable Safe Browsing or bypass a security warning to return to the suspect page. If the source remains unclear, use official support.
03
Close the affected Safari tab on iPhone#
Use Safari’s controls around the webpage, not a button within the warning. Apple specifically cautions that ads can contain fake close buttons. The following is the current iPhone route; Safari’s layout can vary.
- In Safari, tap More, then All Tabs. If the layout is Bottom or Top, tap the Tabs button instead.
- Find the preview of the affected page. Tap the Close button in the upper-right corner of that tab’s preview.
- Keep unrelated tabs open. Do not use Close All Tabs or reopen the suspicious page from recently closed tabs.
The Close control belongs to Safari’s tab overview. A cross drawn inside the warning itself is not the same control.
04
Close the affected Chrome tab on Android#
These steps are for Chrome on an Android phone. They are not instructions for Chrome on iPhone or every Android browser; use the exact browser’s official help if its controls differ.
- In Chrome, tap Switch tabs beside the address bar to see the open tabs.
- Find the affected tab. Tap Close at the top right of its preview, or swipe that tab closed.
- If the tab is inside a group, open the group in the tab overview and close only the affected tab. Avoid deleting a whole group.
If another suspicious tab remains, close it through the same overview. Do not follow a page’s promise to unlock the browser.
05
If the page will not close, stop tapping#
If you cannot reliably reach the browser controls, return to the phone’s Home screen and pause. Ask a trusted nearby helper to use the manufacturer’s instructions for an unresponsive app. Do not keep trying the warning’s buttons or accept an installation to make it disappear.
Reopening a browser can bring an existing tab back. That alone does not tell you whether software was installed. Likewise, a page disappearing is not proof that the phone or accounts are safe. Persistent pop-ups, unexplained redirects or unfamiliar apps need further investigation through official support.
06
Check recurring website notifications separately#
If messages continue after the tab closes, inspect their source rather than reopening the advertisement. In Chrome on Android, open More > Settings > Site settings > Notifications independently. This is separate from blocking pop-up windows.
Review site permissions under Site settings > All sites. If you can identify the unwanted address, change its notification permission to blocked. If you cannot identify it, the Notifications screen also provides an overall switch. Explain that turning this off affects wanted website notifications too; agree on that temporary change first.
After closing the page, check Safari under iPhone Settings > Apps > Safari: enable Block Pop-ups and Fraudulent Website Warning. In Chrome on Android, use More > Settings > Site settings > Pop-ups and redirects and turn pop-ups off. These controls reduce interruptions; they are not a malware-removal result.
07
Preserve browser information while you investigate#
Closing one tab does not require erasing the browser. Do not begin by clearing all history, deleting saved passwords, removing the browser or resetting the phone. Those actions can create a second problem for someone who relies on familiar pages and saved access.
Apple distinguishes Safari history, cookies and website data. Google lets Chrome users choose data categories, including saved passwords and tabs; deleting account-saved data can affect other signed-in devices. If official support later recommends clearing data, review the exact categories and consequences with your parent first. Preserve useful incident details without retaining the suspicious tab.
09
If software, access or money was involved#
If your parent installed an app or configuration profile, or allowed screen sharing or remote control, stop following the stranger’s instructions. Use a separate trusted device to contact the phone manufacturer or another established support provider. Identify the app or profile and what permissions were granted; do not guess which unfamiliar components are safe to remove.
Google’s Android malware guidance includes Play Protect, updates and further device support. It does not make closing an advertisement a substitute for those checks. This guide cannot diagnose an infection or confirm that remote access has ended.
If money or payment details were shared, contact the bank, card issuer or payment service promptly using its official app, statement or card details. Explain the transaction and ask what protective action or recovery is possible. Keep receipts. Do not make another payment to unlock a refund; recovery is not guaranteed.
10
Report through the right channel, then leave a simple plan#
Record the date, browser, message, displayed address and actions taken, if available without reopening the page. Keep passwords, codes and private account details out of shared screenshots. Never revisit the site just to improve a report.
Use your country’s official scam-reporting service. In the United States, the FTC directs reports to ReportFraud.ftc.gov. In the United Kingdom, the NCSC accepts suspicious-website reports and links to the appropriate fraud or police routes when money was lost or an account was hacked. Reporting a website is separate from securing an account or contacting a bank.
Finish by agreeing whom your parent will contact next time. A short note can say: leave the warning, call our trusted helper, and use the browser’s tab overview. Make broader prevention changes later using our iPhone or Android safety guide, with your parent’s agreement.
Help from someone you trust
Keep remote help under your parent’s control.
Set clear boundaries for screen sharing and remote access before the next support session.Sources and further reading
We favor primary public-health guidance and official product documentation. Section links identify context for documented facts, not validation of our own family-planning steps, schedules or examples. Sources do not imply endorsement of Haven & Signal.
Apple: Recognize and avoid social engineering schemesBrowser scam warnings, displayed support numbers, downloads and configuration-profile risks. Checked September 13, 2026.↗Apple: Block pop-up ads and windows in SafariFake close controls, closing a Safari tab, and the current Settings > Apps > Safari protection controls.↗Apple: Open and close tabs in Safari on iPhoneCurrent More > All Tabs route, Bottom/Top layout variation, and the Close control on a tab preview.↗Google: Manage tabs in Chrome on AndroidSwitch tabs, closing individual tabs and handling grouped tabs without deleting an entire group.↗Google: Manage warnings about unsafe sitesGenuine Safe Browsing warnings are distinct from frightening webpage claims; protection should not be bypassed.↗Google: Use notifications to get alertsWebsite notification permissions, the Android Chrome Notifications settings route and overall control.↗Google: Change site settings permissionsSite settings and All sites permit inspection of site-specific permissions without relying on a suspicious message.↗Google: Block or allow pop-ups in ChromeAndroid Chrome Pop-ups and redirects control; continuing interruptions may involve notifications or unwanted software.↗Apple: Delete Safari history, cache and cookiesExplains separate data-clearing choices and their scope; wholesale deletion is not prescribed in this response guide.↗Google: Delete browsing data in ChromeData categories include tabs and saved passwords; deletion of account-saved data can affect other signed-in devices.↗Apple: If your Apple Account has been compromisedOfficial password, device, account-detail and recovery checks after suspected account compromise.↗Google: Secure a hacked or compromised Google AccountAccount recovery, security activity, device review and additional account protection.↗Google: Remove malware or unsafe software on AndroidAndroid-specific protective checks and escalation; no device-clean guarantee is inferred.↗FTC: Spot, avoid and report tech support scamsScare warnings, displayed telephone numbers, remote-access requests and payments used by tech-support impersonators.↗FTC: What to do if you were scammedPrompt contact with the payment provider, account recovery and trusted technical help; recovery is not assured. US reporting context is identified.↗NCSC: Report a scam websiteSuspicious-site reporting and distinct UK reporting routes after financial loss or account compromise.↗About this guide
Sources, scope and updates.
- Research
- Haven & Signal Research Desk
- Sources checked
- September 13, 2026
- First published
- September 13, 2026
This guide draws on the linked sources and practical editorial guidance. It does not report hands-on product testing, independent fact-checking, and an expert assessment. Check current instructions with the relevant provider before acting.
This guide contains no affiliate links or paid placements.