How to identify scams like "Your Windows Subscription Has Expired"

What kind of scam is "Your Windows Subscription Has Expired"?

Upon examination, it has been identified that this is a scam employing a deceptive page that displays multiple fake messages utilizing scare tactics to manipulate visitors into taking specific actions. Additionally, the deceptive page seeks permission to show notifications. Users are strongly advised to disregard and promptly close such websites.

"Your Windows Subscription Has Expired" scam in detail

The deceptive page displays a fake message claiming that the user's Windows subscription has expired, asserting that after the expiration date, the system becomes vulnerable to viruses, malicious software, and identity theft. It uses scare tactics, warning that the Windows is unprotected and exposed to potential threats.

The message further attempts to entice the user with a discount offer of up to 70% off on a purported Windows Security subscription (version 20.9.139 for three devices). It also provides a fake serial number, urging the user to renew their subscription. The inclusion of "Marketing Disclosure" suggests an attempt to give the appearance of legitimacy.

Upon clicking the "Renew Subscription" button, this scam page redirects to another untrustworthy page posing as McAfee page. This secondary site initiates a simulated system scan, falsely indicating the detection of multiple threats.

This scam seems to be employed by affiliates who promote legitimate software, such as McAfee antivirus. The overarching scheme aims to generate commissions for affiliates by convincing users to purchase a subscription through their affiliate link, exploiting the perceived urgency of addressing fabricated security threats.

Legitimate companies like McAfee do not employ scare tactics in their promotional strategies and are not associated with deceptive practices. They offer affiliate programs as a legitimate means for individuals to earn commissions by promoting their products or services.

For online safety, it is crucial to approach unexpected messages or pop-ups with skepticism. Avoid clicking on links or buttons in suspicious messages, and independently verify any claims about subscription expirations or security threats.

Threat Summary:

Name	Your Windows Subscription Has Expired scam
Threat Type	Phishing, Scam, Social Engineering, Fraud
Fake Claim	Windows subscription has expired
Disguise	Notification from Windows Security
Related Domain	protectionreal[.]space
Detection Names (protectionreal[.]space)	Avira (Phishing), Combo Cleaner (Phishing), CRDF (Malicious), Kaspersky (Phishing), Sophos (Malware), Full List Of Detections (VirusTotal)
Symptoms	Fake error messages, fake system warnings, pop-up errors, hoax computer scan.
Distribution methods	Compromised websites, rogue online pop-up ads, potentially unwanted applications.
Damage	Loss of sensitive private information, monetary loss, identity theft, possible malware infections.
Malware Removal (Windows)	To eliminate possible malware infections, scan your computer with legitimate antivirus software. Our security researchers recommend using Combo Cleaner. ▼ Download Combo Cleaner To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Similar scams in general

Scams of this type typically share common characteristics aimed at exploiting users' fears and urgency. They often employ deceptive messages, such as fake subscription expiration notices or security alerts, to create a sense of immediate threat. The scams prompt users to click on links, leading to fraudulent websites that mimic legitimate services.

In many cases, the ultimate goal is to deceive users into purchasing unnecessary software, divulging personal information, or engaging in financial transactions that benefit the scammers. Examples of similar scams are "Malwarebytes - Your PC Is Infected With 5 Viruses!", "CCleaner Total Protection", and "Security Protection Center".

How did I open a scam website?

Users encounter scam sites by clicking on malicious ads, unintentionally visiting compromised websites, or being lured by phishing emails redirecting them to deceitful websites. Certain scams employ search engine optimization manipulation tactics, redirecting users searching for specific keywords to malicious websites.

Additionally, users may access scam websites through notifications from unreliable pages, torrent sites, illegal movie streaming platforms, and other websites that often utilize rogue advertising networks. Adware is also employed to promote scams.

How to avoid visiting scam pages?

Exercise caution when encountering online advertisements, pop-ups, and notifications from dubious websites. Refrain from opening links or files in unexpected emails from unfamiliar addresses. Download applications exclusively from official pages and reputable app stores.

Ensure your computer is equipped with trustworthy antivirus and anti-malware software to identify and block potential threats. Additionally, maintain your system's security by regularly updating your operating system, browsers, and security software.

These measures collectively contribute to a more secure online experience, protecting you from potential cyber threats. If your computer is already infected with unwanted apps, we recommend running a scan with Combo Cleaner Antivirus for Windows to automatically eliminate them.

The appearance of "Your Windows Subscription Has Expired" pop-up scam (GIF):

Text presented on the page:

Your Windows subscription has expired
Your subscription to Windows Protection has expired on 01-01-2024.

After the expiration date your Windows becomes vulnerable to viruses, malicious software and identity theft.

Your Windows is unprotected. It's exposed to viruses and other malware!
Discount (01-04-2024):
UP TO 70% OFF
Windows Security
20.9.139 (3 DEVICES)
Serial Number:
4RJW-TC5M-W7RK-PED1
Renew Subscription
Marketing Disclosure

Please be aware that this is an advertisment, Site may recieve paid compensation for clicks and sales produced from the content found on this webpage - This compensation may affect which companies are displayed and the placement of advertisments

Privacy Policy

At Site, protecting your privacy and offering a secure user experience is a priority to us, and we want to make it clear on any data we collect and use on our customers. This Site is for the general audiences and is not targeted to children, we do not knowingly collect information from children under 13 years of age.

We do not collect any personally identifiable information when you visit our Site. If you follow advertising links to our partners, they may collect personally identifiable information, please ensure you read the privacy policy when visiting affiliated sites.

By using our website, you are granting consent for us to collect your non-personally identifiable information. Should our privacy policy change we will update this page 7 days prior to changes being implemented in order to provide our readers with reasonable notice.

Instant automatic malware removal: Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Quick menu:

• What is Your Windows Subscription Has Expired scam?
• How to identify a pop-up scam?
• How do pop-up scams work?
• How to remove fake pop-ups?
• How to prevent fake pop-ups?
• What to do if you fell for a pop-up scam?

How to identify a pop-up scam?

Pop-up windows with various fake messages are a common type of lures cybercriminals use. They collect sensitive personal data, trick Internet users into calling fake tech support numbers, subscribe to useless online services, invest in shady cryptocurrency schemes, etc.

While in the majority of cases these pop-ups don't infect users' devices with malware, they can cause direct monetary loss or could result in identity theft.

Cybercriminals strive to create their rogue pop-up windows to look trustworthy, however, scams typically have the following characteristics:

• Spelling mistakes and non-professional images - Closely inspect the information displayed in a pop-up. Spelling mistakes and unprofessional images could be a sign of a scam.
• Sense of urgency - Countdown timer with a couple of minutes on it, asking you to enter your personal information or subscribe to some online service.
• Statements that you won something - If you haven't participated in a lottery, online competition, etc., and you see a pop-up window stating that you won.
• Computer or mobile device scan - A pop-up window that scans your device and informs of detected issues - is undoubtedly a scam; webpages cannot perform such actions.
• Exclusivity - Pop-up windows stating that only you are given secret access to a financial scheme that can quickly make you rich.

Example of a pop-up scam:

How do pop-up scams work?

Cybercriminals and deceptive marketers usually use various advertising networks, search engine poisoning techniques, and shady websites to generate traffic to their pop-ups. Users land on their online lures after clicking on fake download buttons, using a torrent website, or simply clicking on an Internet search engine result.

Based on users' location and device information, they are presented with a scam pop-up. Lures presented in such pop-ups range from get-rich-quick schemes to fake virus scans.

How to remove fake pop-ups?

In most cases, pop-up scams do not infect users' devices with malware. If you encountered a scam pop-up, simply closing it should be enough. In some cases scam, pop-ups may be hard to close; in such cases - close your Internet browser and restart it.

In extremely rare cases, you might need to reset your Internet browser. For this, use our instructions explaining how to reset Internet browser settings.

How to prevent fake pop-ups?

To prevent seeing pop-up scams, you should visit only reputable websites. Torrent, Crack, free online movie streaming, YouTube video download, and other websites of similar reputation commonly redirect Internet users to pop-up scams.

To minimize the risk of encountering pop-up scams, you should keep your Internet browsers up-to-date and use reputable anti-malware application. For this purpose, we recommend Combo Cleaner Antivirus for Windows.

What to do if you fell for a pop-up scam?

This depends on the type of scam that you fell for. Most commonly, pop-up scams try to trick users into sending money, giving away personal information, or giving access to one's device.

• If you sent money to scammers: You should contact your financial institution and explain that you were scammed. If informed promptly, there's a chance to get your money back.
• If you gave away your personal information: You should change your passwords and enable two-factor authentication in all online services that you use. Visit Federal Trade Commission to report identity theft and get personalized recovery steps.
• If you let scammers connect to your device: You should scan your computer with reputable anti-malware (we recommend Combo Cleaner Antivirus for Windows) - cyber criminals could have planted trojans, keyloggers, and other malware, don't use your computer until removing possible threats.
• Help other Internet users: report Internet scams to Federal Trade Commission.

Frequently Asked Questions (FAQ)

What is a pop-up scam?

A pop-up scam is a deceptive online tactic where fraudulent pop-up windows appear on a user's screen, often containing false information or warnings to trick individuals into taking unwanted actions.

What is the purpose of a pop-up scam?

A pop-up scam aims to trick individuals into taking actions that benefit the scammer, such as clicking on malicious links, making fraudulent purchases, or divulging personal information.

Why do I encounter fake pop-ups?

Users may end up on scam websites through various means, including clicking on malicious ads, visiting compromised websites, falling victim to phishing emails, interacting with notifications from unreliable pages, accessing content on torrent or illegal streaming sites, etc.

Will Combo Cleaner protect me from pop-up scams?

Combo Cleaner is crafted to scan each website you visit, effectively detecting any malicious ones. This includes websites designed to deliver pop-up scams, ensuring that you are promptly warned and access is restricted accordingly.

▼ Show Discussion