Setting Up a Laptop for an Older Parent: Defuse Fake Virus Alerts
Gifting or setting up a Windows laptop for a parent? Six settings and one sticky note that take the power out of fake virus pop-ups and tech-support calls.
The screen goes red, a siren plays, and a box says to call “Microsoft Support” now. A new laptop is the right moment to make that scene less likely, and to agree in advance on what your parent does if it happens anyway.
Fake virus alerts are not a small problem. The FBI’s 2025 Internet Crime Report lists 47,794 tech support complaints with reported losses of $2,134,675,818. For people 60 and older, tech and customer support scams accounted for 16,926 complaints and $1,040,730,043 in reported losses. These schemes reach every age group; older adults simply report losing more when they are hit.
Below is the order we would follow on a new Windows laptop, the most common gift. Most steps take a minute or two.
Step 1: Give them a standard account, keep the admin account separate
Microsoft’s guide to managing user accounts says “administrators have complete control over the system” and that it is “safer to have fewer administrators and to use standard user accounts for day-to-day activities.” Set up your relative’s everyday account as standard (Settings > Accounts > Other users > Account options > Change account type) and keep a separate administrator account with a password written down somewhere safe at their home.
The effect: if a caller talks your parent into installing a remote-control program, Windows asks for the administrator password first. That pause is often enough for them to stop and call you.
The trade-off is that they will also need that password for legitimate installs. Decide together whether they keep it or call you.
Step 2: Block website notifications
Many fake alerts arrive as browser notifications from a site that was once allowed to send them. In Chrome, Google’s notifications help page gives the path: Settings > Privacy and security > Site Settings > Notifications, where you can choose not to allow sites to send notifications. In Edge, Microsoft’s page on website notifications uses Settings > Privacy, search, and services > Site permissions. For most older relatives, blocking notifications from all sites costs nothing they will miss.
Step 3: Turn on Edge’s scareware blocker and SmartScreen
Microsoft describes Scareware blocker as a feature that “detects and blocks deceptive alerts.” When it triggers, Edge exits full-screen mode, stops the audio and shows a warning. It is on by default only on devices with more than 2 GB of RAM and at least 5 cores, so check it on a budget laptop: Settings > Privacy, search, and services > Security > Scareware blocker.
On the same page, confirm Microsoft Defender SmartScreen is on. Microsoft says it checks downloads “against a list of reported malicious software sites and programs known to be unsafe.” If your relative prefers Chrome, keep both browsers updated and set the one they use as the default, so you know which settings matter.
Step 4: Practise the escape
A frightening full-screen page feels like it has taken over the computer. Microsoft’s Edge team wrote in January 2025 that “users can always close a full screen scareware page by pressing and holding the ESC key,” while warning that such sites may try to hijack the keyboard and mouse. Show your parent: press and hold Esc, then close the browser. If that fails, hold the power button until the laptop turns off. Losing an open tab is a fine price.
Do this once together, on a harmless full-screen video, so the motion is familiar before it is needed.
Step 5: Explain what remote access looks like
Windows includes Quick Assist, a legitimate tool for remote help. Microsoft’s Quick Assist page says to “only use it with people you trust, since they can see your computer screen or control your PC,” and to allow a Microsoft helper only “if you initiated the interaction by contacting Microsoft Support directly.” If someone is already connected, the helper’s control can be ended with Cancel control.
Agree on the rule: the only person who ever connects to this laptop is you, or a technician they called themselves from a number you both checked. Our article on remote-control requests from fake support staff shows how persuasive these calls get.
Step 6: Leave a note on the laptop
Microsoft’s own tech support scam page backs every line: “If you didn’t ask us to, we won’t call you to offer support,” and Microsoft “will never ask that you pay for support in the form of cryptocurrency like Bitcoin, or gift cards.”
What the pop-up says, and what is true
| The screen says | What the companies say | What to do |
|---|---|---|
| “Call Microsoft Support at this number” | Microsoft error messages never include phone numbers | Hold Esc, close the browser, call family |
| “Your computer is infected, do not turn it off” | FTC: legitimate companies won’t contact you by phone, email or text to report a problem | Turn it off if the page won’t close |
| “Your account is locked; pay to unlock” | Microsoft won’t ask for payment in gift cards or crypto | Do not pay; call family |
| “Let a technician connect to fix it” | Quick Assist: only if you contacted Microsoft Support directly | Never allow a connection from a caller |
| “Update your browser now” with a download | Browsers update themselves through their own settings | Close the page; see our browser update check |
Before you leave: a ten-minute handover
Settings work only if the person using the laptop knows they exist. Before you head home, sit down together for a short handover:
- Show them the standard account sign-in and where the administrator password is written down, if they keep it.
- Practise the escape once more: hold Esc, close the browser, and, if needed, hold the power button.
- Open the browser together and set one home page, such as their email or a news site they like, so they are not starting from a search box every time.
- Bookmark the few sites they use (bank, pharmacy, email), so they never need to search for them and land on an ad.
- Turn on automatic updates and check that Windows Update shows no pending restart.
- Read the sticky note aloud and ask them to put it where they will see it.
Then plan a short check-in call in a few weeks: “Seen any strange pop-ups?” Asked as a routine question, it makes it easier for them to mention one without embarrassment.
Phone calls are the other half
Some scams skip the pop-up and start with a call claiming to be from Microsoft or a security company. Microsoft’s advice is to hang up. If your relative also has a smartphone, our holiday tech check-in for a parent’s phone covers call screening and spam settings.
If they already called the number
Disconnect the laptop from the internet. Microsoft’s recovery steps are to uninstall any programs the scammer asked them to install, run a full scan in Windows Security and consider a reset. The FTC says that if they shared a username and password, “change your password right away,” using another device. If they paid, call the bank or card company immediately. Report the scam at ReportFraud.ftc.gov or through Microsoft’s report-a-scam page. Reassure them: these pages are designed by people who do this full time, and the call to you is the step that matters.
Sources
- FTC: How to spot, avoid, and report tech support scams
- Microsoft: Protect yourself from tech support scams
- Microsoft: Scareware blocker in Microsoft Edge
- Microsoft Edge blog: Stand up to scareware (January 27, 2025)
- Microsoft: Quick Assist
- Microsoft: Manage user accounts in Windows
- Google Chrome Help: Notifications
- FBI IC3: 2025 Internet Crime Report (PDF)