If “Microsoft Account Locked” appears in a browser pop-up and tells you to call a phone number, treat it as a tech support scam. A random website cannot lock your Microsoft account, scan your PC for crimes, or connect you to official Microsoft support. The page is built to scare you into calling scammers, paying for fake help, or giving remote access to your computer.
Quick answer
- Do not call the phone number shown in the pop-up.
- Do not enter your Microsoft password on the page.
- Close the browser or force-close it if the page blocks normal controls.
- Remove suspicious notifications and extensions if the warning returns.
- If your real Microsoft account is locked at sign-in, use the official recovery steps instead: Microsoft Account Locked recovery guide.
Real Microsoft account lock or fake pop-up?
The phrase “Microsoft Account Locked” is confusing because it can describe two different situations. A real lock happens when you try to sign in to Outlook, Xbox, OneDrive, Windows, Microsoft 365, or account.microsoft.com. Microsoft then asks you to verify identity through its own sign-in and recovery flow.
A fake lock usually appears on a random website or after a redirect. It may use Microsoft logos, warning colors, alarm sounds, a full-screen browser window, and a “support” phone number. That page is not connected to your Microsoft account. It is a social engineering trap.
| Real lock | Appears during Microsoft sign-in and stays on Microsoft-owned pages. |
| Fake pop-up | Appears inside a browser tab, often with a phone number, countdown, or threats. |
| Real support | Uses official Microsoft support and recovery forms. |
| Scam support | Pushes you to call immediately, install remote access tools, or pay. |
What the “Microsoft Account Locked” scam looks like
The fake page often claims your account or computer was locked because of suspicious activity, illegal content, money laundering, malware, or a security breach. It may say that closing the page will disable your computer or expose your data. These statements are designed to create panic.
Some versions switch the browser to full screen, play a voice warning, or repeatedly reopen dialogs to make the computer feel “frozen.” That does not prove the device is locked. It usually means the browser page is abusing normal web features.
Why scammers use this message
Microsoft accounts often protect email, files, Xbox purchases, Windows sign-in, and Microsoft 365 subscriptions. Scammers borrow that trust. Their goal is not to unlock anything. Their goal is to get one of four things:
- your Microsoft password or verification code;
- remote access through tools such as AnyDesk, TeamViewer, UltraViewer, or Quick Assist;
- payment for a fake security service;
- personal documents, banking data, or saved browser passwords.
What to do if the pop-up is on your screen now
- Do not call the number and do not click “unlock” buttons on the page.
- Press Esc to leave full-screen mode if the browser is full screen.
- Close the tab. If it will not close, use Task Manager on Windows or Force Quit on macOS to close the browser.
- Reopen the browser without restoring the previous session if possible.
- Clear notifications for suspicious sites and remove unknown browser extensions.
- Run a full security scan if the warning returns, if you recently installed software, or if browser settings changed.
Clean up the browser after closing it
Many repeat pop-ups come from browser notification permissions or adware-like extensions. Check these areas first:
- Notifications: remove unknown sites allowed to send notifications in Chrome, Edge, Firefox, or Safari.
- Extensions: uninstall extensions you do not recognize or no longer use.
- Startup pages: remove suspicious pages set to open automatically.
- Search engine: restore your preferred search provider if it changed.
- Site data: clear data for the suspicious domain that showed the warning.
If you called the number
End the call. Do not argue with the operator and do not follow more instructions. If you installed remote access software, disconnect from the internet, uninstall the tool, and restart the computer. Then change important passwords from a different trusted device, starting with your Microsoft account and email account.
If you paid, contact your bank or card provider immediately. If you shared identity documents, payment details, or authentication codes, treat the incident as possible identity theft and monitor accounts closely.
If you gave remote access
Remote access changes the risk level. Scammers may have viewed files, installed software, changed browser settings, added startup entries, or stolen saved passwords. After disconnecting them:
- uninstall the remote access tool they asked you to install;
- run a full scan with Microsoft Defender or another trusted security tool;
- check installed apps for unknown software;
- review startup apps and scheduled tasks;
- change passwords from a clean device;
- enable two-step verification on your Microsoft account.
If your real Microsoft account is locked too
Sometimes users see a scam pop-up while also having a separate sign-in problem. Handle the real account only through Microsoft’s official recovery flow. Do not use any number or link from the pop-up. We wrote a separate guide for that situation: Microsoft Account Locked: how to recover access safely.
How to avoid this scam next time
- Type Microsoft URLs manually or use bookmarks for account recovery.
- Ignore browser pages that claim to be scanning your computer for illegal activity.
- Remember that legitimate Microsoft warnings do not ask you to call a random number from a web page.
- Keep the browser updated and remove extensions you do not need.
- Use phishing and scam protection features in Microsoft Edge, Chrome, or your security software.
FAQ
Can a website lock my Microsoft account?
No. A website can show a scary page, but it cannot lock your Microsoft account. Real account locks are handled by Microsoft during sign-in.
Does Microsoft show support phone numbers in browser pop-ups?
Microsoft’s tech support scam guidance warns that scammers use unsolicited warnings and fake support messages. Use contact options from Microsoft’s official websites only.
Should I restart the computer?
Restarting can close the browser trap, but it does not remove notification permissions, malicious extensions, or remote access software. Check those items afterward.
Is my Microsoft account hacked?
The pop-up alone does not prove your account was hacked. If you entered your password or verification code, change the password immediately and review recent sign-in activity.
