How to Remove a Virus From iPhone and Spot Fake Alerts

A full screen warning pops up in Safari, says your iPhone is infected, and gives you a phone number to call. Before you tap anything, take a breath. If you are searching for how to remove a virus from iPhone after seeing a message like that, the answer is usually simpler than the alert wants you to believe: close the page, clean up Safari, and check for a few leftovers. The questions below cover what is real, what is a scam, and the exact settings to use.

Can iPhones get viruses?

Classic viruses are not what most iPhone owners face, but that does not mean an iPhone can never be tricked. Apple steers software installs through the App Store and says plainly that "the safest way to download apps is from the App Store."

What people actually run into is different. Apple's own page on social engineering schemes lists the usual problems: misleading pop-ups that claim your device has a security problem, unwanted calendar invitations and subscriptions, and apps that ask you to install configuration profiles that can then control your device.

There is also a rare, serious category. Apple built Lockdown Mode for the small number of people who, in Apple's words, "might be personally targeted by some of the most sophisticated digital threats." If you are a journalist, activist or public official, read our coverage of zero click spyware and consider turning it on.

Why does my iPhone say it has a virus?

Because a website is showing you an ad dressed up as a warning. Apple is blunt about this: if you see a pop-up that "warns you about security problems or viruses on your device, don't believe it." These messages are built to scare you into downloading something harmful, calling a fake support line, or paying for a fix you do not need.

Apple's advice is to not call the number or follow the links, and to simply leave the page or close the tab. Its pop-up guidance also warns that some of these ads have fake buttons that look like a close button, so tapping "X" inside the ad can itself be a trap. Close the tab from Safari's own tab view instead.

The FTC says the same thing from the other side: scammers create fake security warnings that tell you to call for tech support, and you should never call a number that appears in a pop-up window. If someone claiming to be Apple Support calls out of the blue, hang up.

Can iPhones get viruses from Safari or websites?

Visiting a sketchy website is far more likely to give you scary pop-ups and redirects than a true infection. The danger is what the site asks you to do next: download a profile, sign in with your Apple Account, enter a card number, or install an app from outside the App Store.

If a page keeps reopening or redirecting, saved website data is a common reason. Clearing it (covered below) normally ends the problem.

Can iPhones get viruses from links?

Tapping a link by itself rarely infects an iPhone, but the page it opens can try to steal your details or push you toward a harmful download. What matters is what you did after tapping. If you only looked and closed it, cleaning Safari is usually enough. If you typed a password or payment details, treat those as exposed. Our guide on what to do after clicking a bad link on your phone walks through that situation step by step.

Downloaded files work the same way: the risk comes when a file or message tells you to install something, approve a profile or "verify" your account.

How do you remove a virus from an iPhone for free?

Work through these in order and stop once the problem is gone. All of them are built into iOS, so there is nothing to buy.

1. Close the scam page. Open Safari's tab view and close the tab. Do not tap buttons inside the pop-up.
2. Clear Safari data. Go to Settings > Apps > Safari, scroll down and tap Clear History and Website Data, choose a time range, then confirm. Apple notes this does not change your AutoFill information. If you would rather keep your history, go to Settings > Apps > Safari > Advanced > Website Data and tap Remove All Website Data.
3. Turn on Safari's protections. In Settings > Apps > Safari, switch on Block Pop-ups and Fraudulent Website Warning.
4. Remove calendar spam. If fake "virus" events keep appearing in your calendar, open the Calendar app, tap Calendars, tap the info button next to the unfamiliar calendar, then tap Unsubscribe or Delete Calendar and confirm. For a single junk invite from someone unknown, tap the event and use Report Junk. Apple's calendar removal steps cover both.
5. Check for a profile you did not install. Open Settings > General and look for a device management or profiles section. Apple's older guidance calls it Profiles or Profiles & Device Management, and says that if you do not see it, no management profiles are installed. If you find one you do not recognize (and it is not from your employer or school), tap it, tap Delete Profile, enter your passcode and restart.
6. Delete apps you do not recognize. Look through your home screen and App Library for anything you do not remember installing, especially "cleaner" or "security" apps you were pushed toward by a pop-up, and remove them.
7. Update iOS. Go to Settings > General > Software Update and tap Download and Install if an update is waiting. Apple calls keeping software up to date "one of the most important things you can do" for security.

Do you need an antivirus app on iPhone?

No, Apple's guidance never tells iPhone owners to install one, and every fix on its support pages uses built in settings, deleting things you did not add, and software updates. Treat "cleaner" or "virus removal" apps with suspicion, especially when a pop-up is the thing telling you to download one.

What if you already called the number or paid?

Act fast, because the scam is now about your accounts, not your phone. The FTC recommends you stop logging into accounts from a device you suspect, change your passwords, and turn on two factor authentication. Apple says that if your Apple Account may be compromised, change its password immediately and make sure two factor authentication is on.

Then take these steps:

• Call your bank or card issuer using the number on the back of your card and dispute any charge to the fake support line.
• If the caller had you install a remote access app, delete it right away.
• Report the scam to the FTC at ReportFraud.ftc.gov. Apple points U.S. users there for scam calls too.

For a faster way to lock down email, banking and social accounts, use our 10 minute account security checklist.

When should you erase your iPhone?

Only when the steps above have not fixed it, or when you are sure a stranger had control of the phone. Erasing is a last resort because it wipes photos, contacts, apps and Apple Pay cards from the device.

Back up first using iCloud or your computer. Then go to Settings > General > Transfer or Reset iPhone > Erase All Content and Settings, enter your passcode, and confirm. Apple notes that your content stays in iCloud when you erase the device. When you set it up again, restore from a backup made before the trouble started.

Is cleaning an iPhone different from cleaning an Android phone?

Yes, the steps differ, and Android cleanup usually involves Safe Mode and reviewing app permissions. Our Android virus removal guide covers that, and our piece on signs your phone has been hacked helps on either platform. More security help lives in our Tech section.

One last check before you put the phone down: open Safari, visit a site you trust, and make sure no warning appears. If it stays quiet and your calendar is clean, you have most likely dealt with the problem.