Trojan Spyware Alert e-mail scam: how to spot it and what to do
Trojan Spyware Alert is a fake tech support scam that uses intimidating pop-ups and loud sounds to trick users into calling a fraudulent support line. The warning messages use Microsoft logos and branding but are entirely staged to exploit less tech-savvy users.
Facts checked October 5, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
Do it yourself · free Remove Trojan Spyware Alert e-mail scam yourself 4 steps, about 12 minutes, no software needed.
Start the steps
Trojan Spyware Alert e-mail scam: summary
| Damage | If you call the fake tech support, you might be tricked into sending crooks money or allow access to your PC remotely, which could lead to malware infections |
|---|---|
| name | Trojan Spyware Alert |
| Type | Tech support scam, fake alert, phishing |
| Imitates | Microsoft Support website |
| Scam message | Access to PC allegedly disabled for security reasons |
| Scam phone numbers | 1-(866)-993-1836, 1-(877)-570-9733 (might vary) |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 10 more facts
| Symptoms | Redirects to suspicious websites that show pop-ups, play sounds, and threaten with malicious messages |
|---|---|
| Name | Trojan Spyware Alert |
| Evidence | 4 write-ups by security sites; no sample analysed yet |
| Arrives as | |
| Pretends to be | A well-known company |
| Claim | Your account needs urgent attention |
| Asks for | Your password |
| Phone number | (866)-993-1836 |
| First seen | 19 November 2021 |
| Facts checked | 5 October 2026 |
What the Trojan Spyware Alert e-mail scam e-mail looks like
Trojan Spyware Alert - Error Code #0x898778
Access to this PC has been blocked for security reasons.
Contact Windows Support: 1-(866)-993-1836
How to tell the Trojan Spyware Alert e-mail scam e-mail is fake
- Phone number:
(866)-993-1836
From our report of Nov 2021 · not reviewed since
More from our earlier report on Trojan Spyware Alert
- Perform a full system scan with , or another reliable anti-malware to check for infections; if you have provided remote access to your PC, change all your passwords; if you have paid money, call your bank
Is Trojan Spyware Alert e-mail scam dangerous? What the senders want
From our report of Nov 2021 · not reviewed since
Trojan Spyware Alert is a fake notification that plays audio in order to intimidate users and make them call the alleged tech support
You might encounter phishing and scam websites at any time while browsing the web on Google Chrome, Mozilla Firefox, or any other browser.
Trojan Spyware Alert is a typical tech support scam that tries to exploit users who are less familiar with computing - its main goal is to scare users by showing them misleading information.
As soon as users land on one of the malicious pages that host the scam, they can see several pop-ups that use Microsoft's logos and other attributes the could easily make people think the message is actually legitimate. The Trojan Spyware Alert is meant to make people believe that their systems are infected with spyware/malware.
According to the message, access to the computer has been blocked "for security reasons," and users need to contact technical support to remediate the situation. During this time, users are bombarded with various warnings and a loud sound that sometimes also comes with a video.
The truth is that this is entirely staged, and there is nothing legitimate about this message. Your computer is unlikely to be infected, and it is also not blocked. Those who do get tricked into calling the provided number might later suffer from various damages, including financial losses or even malware infections.
If you are experiencing browser redirects to suspicious websites frequently, it could be a sign of adware infection, and you should make sure that your system is cleaned from it to stop the intrusive activity. If you have contacted the Trojan Spyware Alert scam authors, we will explain how to resolve the situation and minimize potential damages.
From our report of Nov 2021 · not reviewed since
How the scam operates
Trojan Spyware Alert is not the only tech support scam that we have seen over the years.
In fact, phishing pop-ups and messages of other kinds frequently impersonate Microsoft ("Microsoft Warning Alert," "Pornographic virus alert from Microsoft") or any other popular tech companies such as Google ("Google Chrome Critical Error"). It is very important to note that all these companies have nothing to do with phishing websites, and crooks are only using their names in order to make their scheme more believable.
In this instance, you are dealing with a very common tech support scam. It uses typical scaremongering tactics and claims that the device has been infected by malware.
The main goal of it is to catch visitors by surprise - immediately upon the site entry, users are presented with dozens of pop-ups, which are accompanied by a loud sound. Here's one of the messages within one of the pop-ups you might see:
The message tries very hard to imitate a legitimate warning. It uses a structure of a real Windows error code (even though this particular numerical combination does not exist) and also shows icons and other attributes related to Windows and Microsoft. Ignore all these messages at once.
If you are unable to leave the page in a regular way, press Win + Shift + Esc on your keyboard to open the Task Manager and shut down the tour browser's process at once. You should ignore all the warnings about computer infections, although you definitely should follow the steps in the next section to ensure your device is clean.
Warning: Whatever you do, do not call the provided number.
If you did contact crooks already, please follow the tips at the bottom of this post.
From our report of Nov 2021 · not reviewed since
Check your device for adware
As we already mentioned, users typically encounter phishing and scam sites accidentally.
Usually, they get redirected after clicking a booby-trapped link residing on websites that are not considered secure by any means. For example, illegal software distributors or video streaming sites are plagued by malicious ads, fake links, and phishing messages.
You should always be aware that high-risk sites can be the main reason why you end up installing malware on your system.
Likewise, users might encounter browser redirects due to different reasons. Application or a browser extension categorized as adware might cause users to land on malicious sites, as well as increase the number of various ads they are exposed to during the web browsing sessions.
More aggressive adware might be difficult to detect, as it can hide its active window or now show up in the installed program list. If you would rather avoid the steps below and want a more effective and quick result, you can instead employ or anti-malware software to remove all the malicious software from your system at once. Alternatively, proceed with the steps below.
Check for extensions
Potentially unwanted applications can either be installed on the browser or system. The good news is that browser extensions are less likely to impact your computer drastically (even though they can make your web browsing a total nightmare still), and they are usually very easy to remove. If you have not health with browser extensions before, you can use the manual instructions.
MS Edge (Chromium)
MS Edge (legacy)
Uninstall unwanted programs
As mentioned, adware might be installed on the system level as an application. Thus, check the installed apps section:
Finally, keep in mind that malware could start showing you intrusive ads as well, and it is almost impossible for a regular computer user to eliminate it properly. Therefore, if you haven't found anything suspicious by using the methods described above, rely on security software instead.
This would prevent your system from crashing or suffering from other issues in the future.
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all the suspicious plugins that might be related to the unwanted program by clicking Remove.
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the window's top-right).
- Select Add-ons.
- In here, select the unwanted plugin and click Remove.
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click on Uninstall at the bottom.
- Enter Control Panel into Windows search box and hit Enter or click on the search result.
- Under Programs, select Uninstall a program.
- From the list, find the entry of the suspicious program.
- Right-click on the application and select Uninstall.
- If User Account Control shows up, click Yes.
- Wait till uninstallation process is complete and click OK.
What to do after the Trojan Spyware Alert e-mail
If you only received the message and clicked nothing, step 3 is all you need.
If you clicked the link or typed anything on the page it opened, do every step, starting with the password.
Step 1: Change the password you typed on the fake page
If you entered a password after clicking the link in the Trojan Spyware Alert message, treat that account as known to the sender.
Open the provider's real site by typing its address yourself, not through any link in the e-mail, and change the password there. Choose a new one you have never used before, and change it on every other account that shared the old one.
Then use the option to sign out of all other sessions or devices, if the provider has one. This works the same in any browser on Windows 11 and Windows 10.
Microsoft account, Security page (account.microsoft.com/security): Change password. Full procedure with screenshots: Turn on two-step verification / secure a hacked account
Step 2: Turn on two-step verification
Two-step verification asks for a code from your phone or an authenticator app whenever someone signs in from a new device. A stolen password alone is then not enough to open the mailbox.
Turn it on in the security settings of the e-mail account first, then for the bank, shop and social accounts that send their reset links to that address.
While you are there, check the recovery e-mail and phone number and the forwarding rules, which attackers sometimes change to keep access. The settings pages look the same on Windows 11 and Windows 10.
Microsoft account: Manage how I sign in, where two-step verification and the sign-in methods are. Full procedure with screenshots: Turn on two-step verification / secure a hacked account
Step 3: Report the e-mail and delete it
Report the message instead of only deleting it. In Outlook choose Report > Report phishing, in Gmail the three-dot menu > Report phishing; the provider then blocks the same message for other people.
Do not reply and do not click anything else in it. On a work account, forward it to your IT team as an attachment first. Web mail and the mail apps on Windows 11 and Windows 10 offer the same options.
New Outlook for Windows and Outlook on the web: Report > Report phishing. Full procedure with screenshots: Report a phishing e-mail
Step 4: Scan the PC if you opened a file from the message
A page that only asked for a password installs nothing, so most readers can skip this step.
If the Trojan Spyware Alert e-mail or the page it opened made you download or open a file, delete it and run a full scan, then a Microsoft Defender Offline scan.
In Windows 11 and Windows 10 open Windows Security > Virus & threat protection > Scan options, select Microsoft Defender Antivirus (offline scan) and click Scan now. The PC restarts and the scan takes about 15 minutes, so save your work first.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Choose a proper web browser and improve your safety with a VPN tool
Online spying has got momentum in recent years and people are getting more and more interested in how to protect their privacy online.
One of the basic means to add a layer of security - choose the most private and secure web browser. Although web browsers can't grant full privacy protection and security, some of them are much better at sandboxing, HTTPS upgrading, active content blocking, tracking blocking, phishing protection, and similar privacy-oriented features.
However, if you want true anonymity, we suggest you employ a powerful VPN - it can encrypt all the traffic that comes and goes out of your computer, preventing tracking completely.
Lost your files? Use data recovery software
While some files located on any computer are replaceable or useless, others can be extremely valuable.
Family photos, work documents, school projects - these are types of files that we don't want to lose. Unfortunately, there are many ways how unexpected data loss can occur:
- power cuts
- Blue Screen of Death errors
- hardware failures
- crypto-malware attack
- even accidental deletion
To ensure that all the files remain intact, you should prepare regular data backups. You can choose cloud-based or physical copies you could restore from later in case of a disaster. If your backups were lost as well or you never bothered to prepare any, can be your only hope to retrieve your invaluable files.
From our report of Nov 2021 · not reviewed since
Victim of a Trojan Spyware Alert scam? How to recover
There are plenty of people that are ready to harm others for their own benefit - the sheer amount of malware and scams created constantly shows that this is true.
There are plenty of users who are less familiar with scams and how they operate, hence they fall victims every day. The unfortunate part is that the most vulnerable social groups, such as the elderly, are frequently targeted.
If you were unfortunate enough to get tricked by the fake message and called the provided fake tech support number, you should get ready for consequences. You can take certain measures to reduce the impact of this, however. Keep in mind that the negative consequences only apply if you have allowed remote access to your computer during the call, provided your personal information, or paid for fake services.
- If you paid for whatever crooks came up with (usually their "services"), you should contact your bank and explain the situation;
- If you provided personal details to crooks, such as passwords, change them immediately. Also, monitor your online banking for illegal transactions;
- Employ powerful security and ad-blocking software that would protect you from online scams and malware.
Questions about Trojan Spyware Alert e-mail scam
Is Trojan Spyware Alert real?
No, Trojan Spyware Alert is completely fake. It's a tech support scam designed to intimidate users and make them call the provided number to reach fraudulent support operatives. The warning message is entirely staged and has nothing legitimate about it.
Your computer is unlikely to be infected and is not actually blocked as the message claims. The warning uses Microsoft's logos and other attributes specifically designed to deceive users into believing the message is a genuine Windows security warning.
Users might see several pop-ups, loud threatening sounds, and video warnings when they land on malicious pages hosting the scam. All these theatrical elements are theatrical tricks to bypass user skepticism and create urgency to call the fake support number immediately.
How does the Trojan Spyware Alert scam work?
The scam operates through deceptive pop-ups that appear when you visit compromised or malicious websites. As soon as you land on one of these pages, you're bombarded with pop-ups claiming your system is infected with spyware or malware. The pop-ups display fake error messages using authentic-looking Windows error codes (though these codes are fabricated).
Loud sounds and sometimes videos accompany the warnings to create panic. The message states that access to your computer has been blocked for security reasons and instructs you to contact technical support immediately. Users panicked by these fake warnings often call the provided phone number, where scammers pressure them into either sending money or granting remote access to their computers.
What happens if I call the fake support number?
Calling the Trojan Spyware Alert scam number subjects you to professional manipulation by experienced scammers. If you call, you'll be tricked into either sending money to fix fake problems or allowing remote access to your computer.
Scammers might request payment through wire transfer, gift cards, or cryptocurrency, which are irreversible payment methods. Those who grant remote access risk far more serious damage—scammers can install actual malware on your system, steal your financial information, access your email and bank accounts, and cause extensive damage.
Remote access gives criminals complete control of your machine, and you may never fully know what they accessed or installed. If you already contacted the scammers, immediately change all your passwords and contact your bank if you sent money.
How do I escape the fake warning?
If you're unable to close the page through regular means, press the keyboard shortcut Win + Shift + Esc to open the Task Manager immediately. In Task Manager, find your browser's process (typically chrome.exe, firefox.exe, msedge.exe, or safari), select it, and click End Task to close the browser completely.
Close the browser with its full process terminated, rather than just trying to click the X button. Be aware that the fake warning may have opened multiple windows or tabs designed to reopen automatically.
Check that all browser windows are closed completely. After escaping the scam site, do not visit it again. Ignore all messages within the pop-ups claiming your device has been infected or blocked—these are all deceptive lies designed to manipulate you.
Is there really malware if I see this alert?
Not necessarily. The Trojan Spyware Alert scam typically appears without any actual malware infection triggering it. You might land on the malicious page by clicking a deceptive link on an unsafe website or through malicious redirects from compromised sites.
However, some users encounter the scam due to adware infections that redirect them to the phishing pages. If you're experiencing frequent browser redirects to suspicious websites, it could indicate adware infection, and you should scan your system for potentially unwanted programs.
Even without adware, simply visiting malicious websites can display the fake alert. You need to check your device for actual infections while ignoring the alert's threats. Run antivirus software to determine if you have genuine security issues beyond just seeing this fake warning.
How do I check if I actually have malware?
Perform a full system scan with professional antivirus or other reliable antimalware software to verify whether your system contains genuine infections. Run a thorough scan using your current security software, or if you suspect it's not comprehensive enough, try alternative security tools.
These programs will report any real malware, potentially unwanted programs, or adware actually present on your system. Unlike the fake Trojan Spyware Alert warnings, these security tools scan your actual system and report legitimate threats.
If you have provided remote access to your computer to the scammers, change all your passwords immediately from a different device and have your bank monitor your accounts for unauthorized activity. Even without remote access being granted, run security scans to ensure the pop-ups haven't left actual infections.
How do I remove adware if it's redirecting me to scam sites?
Browser extensions are the easiest place to find adware causing redirects. In Chrome, click the menu (three vertical dots), select More tools > Extensions, and remove any suspicious plugins by clicking Remove. In Firefox, click the menu (three horizontal lines) and remove unwanted plugins.
In Edge, go to Settings > Extensions and click Remove. In Safari, select Menu, choose Extensions, find suspicious extensions, and click Uninstall. After removing browser extensions, check your installed programs in Control Panel > Programs > Uninstall a program.
Find suspicious applications and right-click to Uninstall them. If you haven't worked with browser extensions before, carefully inspect any unfamiliar programs. However, malware can hide at deeper system levels, making professional antivirus software the most effective and safest removal method.
What other tech support scams should I watch for?
Many variations of this scam exist using different company names and branding. Microsoft Warning Alert and Pornographic virus alerts falsely claim to be from Microsoft. Google Chrome Critical Error scams impersonate Google Chrome support.
It's crucial to remember that Microsoft, Google, and other major tech companies never display unsolicited pop-up warnings during browsing. Legitimate companies contact you proactively only in extremely rare circumstances and never through unexpected pop-ups demanding immediate action.
If you see any urgent warning pop-up claiming your system is infected or blocked, it's almost certainly a phishing scam. Never trust warnings that appear unexpectedly during normal browsing. Always navigate directly to official company websites through your browser's address bar if you have security concerns—never click links within suspicious pop-ups.
Will Fortect remove Trojan Spyware Alert?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For Trojan Spyware Alert, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- Wikipedia: Phishing (read October 5, 2026)
- Economic Times: Definition of 'Spyware' (read October 5, 2026)
- The Daily Swig: Cyber scams and ransomware booming amid Covid-19 lockdowns – Europol (read October 5, 2026)
- FTC: How to recognize and avoid phishing scams (read October 5, 2026)
- CISA: Recognize and report phishing (read October 5, 2026)