Unwanted popup

I got a popup window asking to renew my norton subscriptop

subscription when I was using facebook. I think it is a somekinf of malware.

How can I be sure?

That pop-up is almost certainly a scam, especially since it appeared while you were browsing Facebook. Legitimate security software typically sends renewal alerts through its own application interface, not as pop-ups within a web browser.

How to Confirm It’s a Scam
You can be sure it’s fraudulent if you notice any of these red flags:

  • Browser-Based: If the alert is inside your browser window (like a tab or pop-up on a website), it is a “scareware” tactic used to trick you.
  • Urgency & Pressure: Scams often use countdown timers or alarming language like “Your PC is infected with 5 viruses!” to make you panic.
  • Phone Numbers: Real security alerts will never ask you to call a specific phone number for “support” or “renewal”.
  • Suspicious URLs: Check the address bar; if it isn’t a legitimate domain like Norton.com, it’s fake.

How to Safely Check Your Actual Status
Instead of clicking anything in that window, follow these steps:

  1. Open Your App Directly: Open the Norton application installed on your computer. If it says “Protected” or shows a green checkmark, your subscription is active.
  2. Verify Online: Log in directly at my.norton.com to check your current subscription and expiration date.
  3. Run a Scan: Use your actual Norton software to run a “Full System Scan” to ensure no malicious files caused the pop-up.
  4. Clear Browser Data: Close your browser and clear your cache/history to remove any stored scripts that might be triggering these ads.

Important: Never provide credit card details or grant remote access to your computer based on a pop-up alert.

==============================================

That pop-up is almost certainly a scam. Legitimate Norton alerts appear within the Norton application itself or as system-level notifications, never as pop-up windows inside a web browser like Facebook.

How to Confirm It’s a Scam
You can be sure the alert is fraudulent if you notice these red flags:

  • Browser-Based Alert: The message appeared while you were browsing Facebook. Real security software does not use website pop-ups to notify you of expiration.
  • Urgent or Alarming Language: Scams use phrases like “Immediate action required” or “Your computer is infected” to create panic.
  • Requests for Phone Calls: Official Norton support will never ask you to call a phone number displayed in a browser pop-up.
  • Spelling or Design Errors: Many fake alerts contain grammatical mistakes or low-quality graphics.

How to Safely Check Your Actual Status
To verify your subscription without risk, use these official methods:

  • Check the App: Open the Norton software already installed on your computer. If it shows “Protected” or a green checkmark, your subscription is active.
  • Log in to Your Account: Go directly to my.norton.com and check the “My Subscriptions” section to see your true expiration date.
  • Verify the Domain: If you received an email along with the pop-up, check if it came from an official Norton domain.

Immediate Actions to Take

  1. Close the Window: Use Alt + F4 (Windows) or Command + Q (Mac) to force-close the browser if the pop-up won’t let you exit.
  2. Clear Browser Data: Delete your browser’s cache and cookies to remove any tracking scripts that triggered the pop-up.
  3. Run a Scan: Use your installed Norton software to run a Full System Scan to ensure no actual malware is present.

Note: Never provide credit card information or grant remote access to your computer to anyone who contacts you through a browser pop-up.

Did you click on any links or download any files from that pop-up before closing it?

============================================

Norton 360 for iOS | Android
That pop-up is a scam. Legitimate Norton 360 mobile alerts appear as system notifications from the app itself or within the official Norton app, never as a pop-up window while you are browsing Facebook.

How to Confirm It’s a Scam

  • Location: If the message appeared inside the Facebook app or a web browser tab, it is “scareware” designed to trick you.
  • Urgency & Fear: Scams use alarming language like “Your device is infected!” or “Subscription expired – call now” to force a quick, irrational decision.
  • Payment & Phone Numbers: Norton will never ask for payment or provide a support phone number inside a random browser pop-up.

How to Verify Your Real Status

  1. Check the Norton App: Open the Norton 360 app on your iOS or Android device. If the main screen shows a green “Protected” checkmark, your subscription is active.
  2. Verify via App Store/Google Play: If you subscribed through your phone, check your subscriptions in your phone’s settings:
  • iOS: Settings > [Your Name] > Subscriptions.
  • Android: Google Play Store > Profile Icon > Payments & Subscriptions > Subscriptions.
  1. Check Norton Account: Log in directly at my.norton.com to see your exact expiration date and billing history.

Immediate Safety Steps

  • Close the Pop-up: Do not tap “OK,” “Cancel,” or any link. Close the Facebook app or the specific browser tab immediately.
  • Clear Browser Cache: On Android, clear the cache for Chrome (Settings > Apps > Chrome > Storage). On iOS, clear Safari data (Settings > Safari > Clear History and Website Data).
  • Run a Scan: Open your genuine Norton 360 app and run a “Full Scan” to ensure no malicious scripts were left behind.

Did you tap on the pop-up or provide any personal information before closing it?

====================

Malwarebytes Mobile Security free
https://www.malwarebytes.com/mobile
https://community.norton.com/t/full-scan-on-android/472467/3

====================

Note: AI sourced content may include mistakes

No. I did not do anything, just closing facebook.

Today my wife got the same popup on hotave

No I did not clik anyware, just closinf faceboot app