Safari Pop-Ups and Fake Virus Warnings on a Mac: What Is Real and How to Stop Them
Safari keeps showing virus warnings or pop-ups? How to tell what is fake, stop them safely, check notifications and extensions, and when to get help.
If Safari keeps showing virus warnings or pop-ups, take a breath. Almost all of them are fake, they are designed to frighten you, and they are usually easy to deal with safely. This guide explains what they are, how to get out of them and how to stop them coming back.
First, do not click anything
Some pop-ups are third-party ads that use phishing tactics, such as warnings or prizes, to make you believe they come from Apple or another trusted company, so that you share personal or financial information. Others claim to offer free downloads, software updates or plug-ins to trick you into installing unwanted software.
A web page is not diagnosing your Mac, however official it looks. Treat any warning that gives you a phone number to call as a scam.
Signs a pop-up is fake
A Safari alert is almost always fake if it appears inside a web page rather than as a system message, uses urgent language such as “immediate action required”, includes countdown timers or flashing warnings, shows a phone number for “Apple Support”, or asks you to download software or run a scan. If something is trying to scare you into acting quickly, it is not trustworthy.
Get out of the page safely
Avoid interacting with pop-ups or pages that seem to take over your screen. If you see an annoying pop-up in Safari, go to the Search field and enter a new web address or search term. Some pop-ups have fake buttons that look like a close button, so if you are not sure, do not click it. Close the Safari window or tab instead.
If Safari keeps reopening the same page, quit Safari, then hold down the Shift key while you open it again. That stops Safari reopening the windows and tabs that were open.
Turn on Safari’s pop-up and fraud protection
On a Mac, open Safari and choose Safari, then Settings. In the Websites tab you can allow or block some or all pop-ups. In the Security tab, turn on the setting that warns you when you visit a fraudulent website.
On an iPhone or iPad, open Settings, tap Apps, then tap Safari, and turn on Block Pop-ups and Fraudulent Website Warning.
Check website notifications
Many ongoing alerts come from websites that were allowed to send notifications. In Safari, choose Safari, then Settings, then click Websites, then click Notifications. Remove any site you do not recognise, and turn off the option that lets websites ask for permission to send notifications.
Check Safari extensions
Unwanted extensions can cause redirects, pop-ups and search changes. Choose Safari, then Settings, then Extensions, and remove anything you do not recognise. If you are not sure whether an extension is safe, do not guess. Ask us.
If pop-ups will not go away
If pop-ups will not go away despite these settings, keep avoiding them and install the latest software updates for all your Apple products. Adware is advertising-supported software, and some third-party download sites bundle it with the software you wanted. Many updates include security improvements that can help control pop-ups.
The safest way to download apps is from the App Store. If you need something that is not there, get it directly from the developer or another reliable source, not through an ad or a link.
Signs of something deeper are pop-ups in more than one browser, search results that redirect, or a home page or search engine that changes on its own. That does not mean your Mac is “infected”, but it is time for a proper check instead of trial and error.
What not to do
Do not call a number shown in a pop-up. Do not enter your Apple Account details or a payment card. Do not download a “cleaner” or “virus removal” app that an ad or web page recommends.
Also never paste a command into Terminal because a web page told you to. On macOS 26.4 and later, if you do not regularly use Terminal and paste a command copied from somewhere like a website, your Mac may show a “Possible malware, Paste blocked” alert. If you see it, your Mac has not been harmed. Do not paste the command unless you are certain what it does and where it came from.
A calm rule to remember
Real Mac security does not shout. If something is trying to scare you, rush you or pressure you into clicking, stop and get a second opinion.
Related guides
Scammers also use messages and calls. See our guide to phishing and online shopping scams, and our guide to whether you need antivirus on a Mac.
When to get help
If pop-ups keep coming back, or you would rather not risk deleting the wrong thing, we can check your Mac quickly and calmly. See our Online Safety & Protection service, or contact Your Mac Tech.
