TL;DR: Pop-ups saying "179 viruses have been found in your iPhone’s storage" or "your iPhone has been hacked" are scareware: fake warnings designed to make you tap a button that downloads malware, installs a scam app or sends you to a paid "cleaner." Which? flagged both versions in 2026 (15 June and 12 October). They usually appear after you click a dodgy link. Don’t tap anything inside the pop-up. Force-close the browser, clear website data, and turn on Safari’s Block Pop-ups and Fraudulent Website Warning settings.
The pop-ups
Which? logged two this year:
| Date | What it says | Risk |
|---|---|---|
| 12 October 2026 | "179 viruses have been found in your iPhone’s storage," with a button to tap | Likely downloads malware that can steal personal information |
| 15 June 2026 | "Apple iPhone hacked": your details were found in a data breach and "your device is at risk of being compromised" | Buttons typically lead to malware; Which? classes it as scareware |
Which? says these pop-ups typically appear after you click a dodgy link, for example in a text, an email or a search ad.
Why it’s fake
A web page can’t scan your iPhone’s storage. iPhone apps are sandboxed from one another, and a website open in Safari has no way to look through your files. Any page claiming to count your viruses is making the number up, and 179 is just specific enough to sound scientific.
Apple’s own guidance on pop-ups also warns that "some pop-ups and ads have fake buttons that resemble a close button" (Apple Support). That’s the trap: the "Close" or "Cancel" button may be part of the scam.
How to close it safely
Don’t tap anything inside the pop-up. Instead, force-close the browser. Which? gives these steps:
| Device | How to force-close |
|---|---|
| iPhone | Swipe up from the bottom of the screen (or double-click the Home button on older models), then swipe the browser away |
| Android | Settings > Apps > your browser > Force Stop |
| Windows | Press Ctrl + Alt + Delete, open Task Manager, select the browser and choose End Task |
| Mac | Press Option + Command + Esc, select the browser and click Force Quit. Apple suggests reopening Safari while holding Shift so it doesn’t restore the old windows |
Then, on iPhone, go to Settings > Apps > Safari > Clear History and Website Data (on older iOS: Settings > Safari).
Settings that help stop it happening again
According to Apple:
- iPhone and iPad: Settings > Apps > Safari, then turn on Block Pop-ups and Fraudulent Website Warning.
- Mac: In Safari Settings, use the Websites tab to block pop-ups, and in the Security tab turn on the warning for fraudulent websites.
If pop-ups keep coming back, check Settings > General > VPN & Device Management for profiles you don’t recognise, and look for unknown subscribed calendars too (how to remove them).
If you tapped it
- Installed an app or profile? Delete it.
- Entered your Apple Account details? Change your password and check trusted devices (Apple Account guide).
- Called a "support" number? Hang up. If you gave anyone remote access, follow our remote-access recovery steps.
- Paid for a "cleaner"? Contact your bank. If it was an App Store subscription, cancel it and request a refund from Apple.
Other Apple-themed scams Which? flagged in 2026
- 21 April: a text claiming a "problem processing your billing details" had paused your Apple account, linking to a phishing site.
- 14 September: copycat "iPhone 18 Pro" shopping sites using countdown timers and low prices. Which? says buy from apple.com/uk/store or a mobile network.
- 20 October: McAfee found 970 fake apps on Google Play targeting UK users by impersonating brands including PayPal, Apple Pay and Netflix.
How to report it
- Report scam websites to the NCSC via the GOV.UK report page.
- Forward scam texts to 7726.
- Forward scam emails to report@phishing.gov.uk.
The breach angle
The June version used a real fear: "your details were in a data breach." If you want to know whether that’s true, check properly. A free email exposure check shows which breaches include your email, without the pop-ups.
Frequently Asked Questions
Can a website find viruses on my iPhone?
No. A website can’t scan your iPhone’s storage, so any pop-up claiming to have found viruses is fake.
How do I get rid of a fake virus pop-up on iPhone?
Don’t tap it. Swipe up to open the app switcher, swipe Safari away, then clear history and website data in Settings.
Is the "Close" button on the pop-up safe to tap?
Not necessarily. Apple warns some pop-ups have fake buttons that look like a close button. Force-close the browser instead.
I tapped the pop-up. Is my iPhone hacked?
Not necessarily. Remove any app or profile it installed and change your Apple Account password if you entered it.
How do I stop pop-ups in Safari?
Go to Settings > Apps > Safari and turn on Block Pop-ups and Fraudulent Website Warning.
Sources
- Which?: The latest scam alerts (Apple pop-ups, 15 Jun and 12 Oct 2026)
- Apple Support: Block pop-up ads and windows in Safari