Windows Phone Link Remote attack - Abusing the mandatory Phone Link Requirement

John Peter McGrath 0 Reputation points
2026-09-02T15:30:47.44+00:00

Phone Link Hacker Attack - Low quality indows security

User's image

I have been getting attacked through remote trojan that fights with my mouse and before being pressured to give up to Microsoft Phone Link, I get some malware attacks with lock screen saying Device pending, you must connect with phone link to unlock this device.

It was trying to steal financial information when I gave in to linking my mobile phone with PC, which somehow made manipulation easier. I was quick to reject any financial payments.

I want a way to stop taht trojan from affecting my computer and no more popups.

The App is unavailable popup with a suspicious low quality image if Microsoft security shield with a little gray rectangle with the app called Microsoft.PhoneLink. This app is responsible for causing the lock screen for pressuring people to connect phones to PC and steal control from the PC computer.

How do I uninstall the trojan app called Microsoft.PhoneLink that causes the remote computer attacks. What can I do to remove the randomware that abuses Phone Link?

Update 1: I see the windows execution attempt to run the phone verification required with processor with 1,2,3 and then the endless popups begin with an invalid looking microsoft windows security logo. I need to find a way to get rid of that trojan, even when I updated my passwords

User's image

Windows for home | Other | Security and privacy
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Alex-L 12,555 Reputation points Microsoft External Staff Moderator
    2026-09-03T13:42:12.5033333+00:00

    Hi John Peter McGrath

    One thing I would add is that the screenshots you posted do not appear to match the Phone Link setup experience described in Microsoft's documentation. Phone Link is an optional app used to connect a phone to a Windows PC, and I am not aware of any Microsoft documentation stating that Phone Link is required to unlock a PC, verify a Windows device, use Microsoft Store, or continue using OneDrive.

    Because of that, I would be cautious about interacting with those prompts and would focus on determining what process is generating them. If the mouse is moving on its own or someone may have had remote access to the PC, the AI answer's recommendation to treat the situation as a possible malware or tech-support-scam incident and perform a thorough security cleanup is appropriate. Microsoft also states that genuine Microsoft warnings do not include phone numbers for support.

    Was this answer helpful?

  2. AI answer

    2026-09-02T15:31:09.8866667+00:00

    Those pop-ups should be treated as suspicious. The available Microsoft guidance does not indicate that Phone Link is a mandatory Windows security requirement or that a PC must be linked to a phone to unlock the device.

    Use this cleanup path:

    1. Do not interact with the pop-up Do not click links, buttons, or any phone number shown in warning messages. Microsoft guidance for scam scenarios says unsolicited support warnings and pop-ups with phone numbers are not legitimate.
    2. Close the browser or app showing the message If the warning is coming from a browser tab or full-screen page, close it. If it is frozen, use Task Manager to end the browser task. Similar Microsoft Q&A guidance notes these fake warnings are often browser-based scam pages.
    3. Uninstall any app that was installed because of the warning If any remote-control or unknown app was installed after the pop-ups began, remove it from Settings > Apps > Installed apps. Microsoft guidance for tech support scams says to uninstall applications that scammers asked to install.
    4. Run a full malware scan Run a full scan with Windows Security. Microsoft guidance for malware removal and tech support scam recovery explicitly recommends a full scan to remove malware.
    5. Install all security updates Go to Start > Settings > Update & Security > Windows Update and apply all available updates.
    6. If remote access was granted or the mouse was being controlled, consider resetting the PC This is the highest-risk sign in the description. Microsoft guidance says that if scammers had access to the device, resetting it may be the best option in some situations. This is disruptive and can remove apps and settings, so back up personal files first.
    7. Change passwords after cleanup If financial or sign-in information may have been exposed, change passwords after the device is cleaned or reset.

    About Microsoft.PhoneLink:

    • The available documentation only states that Phone Link is available on Windows 10 and Windows 11 PCs and provides setup/update troubleshooting.
    • The available documentation does not support the claim that Phone Link is ransomware or a required device-verification component for Windows sign-in, Microsoft Store, or OneDrive.

    If the issue is only with Phone Link setup itself, the documented checks are:

    • Keep the PC and Android device nearby, turned on, and connected to the same Wi‑Fi.
    • If code matching failed more than 3 times, close and reopen Phone Link on the PC and start setup again.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.