Removal guide Ransomware

Remove FBI or Police virus from iPhone and iPad (iOS Guide)

By Stelian3 min read

If your iPhone or iPad (iOS) device is locked, and you are seeing a “ATTENTION! Your phone has been blocked up for safety reasons” notification from a law enforcement agency (FBI, Australian Federal Police, Metropolitan Police, U.S. Department of Justice) asking you to pay a fine via GreenDot MoneyPak, Ukash or Paysafecard code, then your iPhone or iPad has stumbled upon a malicious web page.
FBI Virus on Iphone

Advertisements

Fake FBI WARNING

This fake notification is nothing more than a malicious javascript page, and does not drop any malicious files on users iPad or iPhone.
When users are redirected to this malicious websites, a javascript will display a bogus notification that pretends to be from an official law enforcement agency (examples: Irish An Garda Síochána, Royal Canadian Mounted Police, Police Central e-crime Unit, Australian Federal Police) and states that your browser has been blocked due to it being involved with the distribution of pornographic material, SPAM and copyrighted content.

The malicious website will lock you out of your Safari web browser, so whenever you’ll try to navigate to a webpage, it will display instead a lock screen asking you to pay a non-existing fine of $300 in the form of an MoneyPak, Ukash, Paysafecard or MoneyGram Xpress voucher. The malware’s authors prefer these payment services because transactions made through them cannot be reversed and are hard to trace.
Furthermore, the malicious website will claim that all your file are encrypted. The good news is that this website doesn’t scramble any of your data or exfiltrate audio and video as it claims; it merely locks your phone with a popover browser window that quickly reappears if you try to get clear of it.

Advertisements

Is my iPhone or iPad phone infected with the Police or FBI virus?

If your computer is infected with the iPhone or iPad phone virus, this infection will display a localized webpage that covers the Safari web browser screen and demands payment for the supposed possession of illicit material.
Cyber criminals often updated the design of this lock screen, however you should always keep in mind that the Federal Bureau of Investigation or any other police agency will never lock down your iPhone or iPad phone.
The message displayed by this ransomware infection can be localized depending on the user’s location, with text written in the appropriate language:

ATTENTION! Your phone has been blocked up for safety reasons listed below.
All the actions performed on this phone are fixed.
All your files are encrypted.
CONDUCTED AUDIO AND VIDEO.

You are accused of viewing/storage and/or dissemination of banned pornography (child pornography/zoophilia/rape etc.) You have violated World Declaration on non-proliferation of child pornography. You are accused of committing the crime envisaged by Article 161 of United Stated of America criminal law.

Article 161 of United States of America criminal law provides for the punishment of deprivation of liberty for terms from 5 to 11 years.

Also, you are suspected of violation of “Copyright and Related rights Law” (downloading pof pirated music, video warez) and of use and/or dissemination of copyrighted content. Thus, you are suspected of violation of Article 148 of United States of America criminal law.

Article 148 of United States of America criminal law provides for the punishment of deprivation of liberty for terms from 3 to 7 years or 150 to 550 basic amounts fine.

It was from your phone, that unauthorized access had been stolen information of State importance and to data closed for public Internet access.

[…]

The penalty set must be paid in course of 48 hours as of the breach. On expiration of the term, 48 hours that follow will be used for automatic collection of data on yourself and your misconduct, and criminal case will be opened against you.

Amount of fine is 300$. You can settle the fine with MoneyPak xpress Packed vouchers.

As soon as the money arrives to Treasury account, you phone will be unblocked and all information will be decrypted in course of 24 hours.

This FBI or Police notification is a scam, and you should ignore any alerts that this malicious website might generate.
Under no circumstance should you send an $300 MoneyPak or MoneyGram Xpress voucher to these cyber criminals, and if you have, you can  should request a refund, stating that you are the victim of a computer virus and scam.

Advertisements

How to remove Police or FBI virus from iPhone or iPad (Removal Guide)

  1. Launch the Settings app from the Home screen of your iPhone or iPad.
    Tap on Settings Iphone
  2. Scroll down and tap on Safari
    Safari Iphone
  3. Now scroll all the way to the bottom and tap on Advanced.
    Advanced option iPhone
  4. Tap on Website Data.
    iPhone Website Data
  5. Scroll to the bottom again and tap on Remove All Website Data.
    Remove All Website Data iphone
  6. Confirm one more time you’d like to delete all data.
Advertisements

Finish the cleanup. Keep protection on.

Follow the removal steps above, then consider ongoing protection against malicious software and unwanted advertising.

Affiliate links We may earn a commission if you buy through these links, at no extra cost to you. How we’re funded

MalwarebytesSCAM & MALWARE PROTECTION

Go beyond a one-time scan.

Malwarebytes can detect and remove malware and unwanted programs. Premium Security adds real-time protection against new threats.

  • Scam Guard for suspicious messages
  • Real-time malware protection with Premium
Explore MalwarebytesExplore features on the official website
AdGuardAD & TRACKER BLOCKING

Reduce unwanted ads and redirects.

AdGuard filters ads and trackers while you browse. It can help reduce exposure to advertising that sends you to unwanted pages.

  • Blocks intrusive ads and pop-ups
  • Filters trackers while you browse
Explore AdGuardExplore features on the official website

Features vary by device and plan. These tools add protection; they do not guarantee that a website or offer is trustworthy.

Join the discussion

31 comments

Share your experience or ask a question about this article.

Discussion

  1. Mark

    Thank you for this.
    My iPad browser recently locked threatening Metropolitan Police action if I didn’t pay a fine via an iTunes Gift Card number sent via SMS message to a listed number. I knew it was a scam as the British Police do not work in this manner but still, worry-some all the same
    Again, Thank You

    ReplyReport
    1. StelianTeam

      In reply to Mark

      You handled it correctly, Mark. Police and government agencies do not demand fines through iTunes or other gift cards, and the threatening browser page has no authority over the device. I am glad the guide helped clear it without sending money.

      ReplyReport
  2. Jayne

    Hi thank you I was baffled when it piped up I rang the police . I followed it step by step and it worked thank you

    ReplyReport
    1. StelianTeam

      In reply to Jayne

      You are very welcome, Jayne. Calling the police through an independently verified number was sensible, and I am glad the step-by-step reset cleared the fraudulent warning.

      ReplyReport
  3. Cath

    Thank you Stelian, just saved my 9 year old from having a melt down created by a mix of fearing the police were coming to get her and losing all her stuff on her iPod ;-)

    ReplyReport
  4. Dd

    I’m a bit confused.
    It says they have turned on camera and sound. I dont want tobbe watched or heard so how do Istop that

    ReplyReport
  5. DD

    It says camera and sound has been turned on.? Im really worried.are you sure its fake? Or is it real??

    ReplyReport
  6. Jamie

    I think I did it be resetting my IPad and restoring it from a few days earlier. Do you think this should work the same?

    ReplyReport
  7. Aric Lee

    Thank you very much for giving us these specific instructions to us, it was very helpful, and definitely appreciate it.

    ReplyReport
  8. Aric Lee

    Thank you very much for giving us these specific instructions to us, it was very helpful, and defiantly appreciate it.

    ReplyReport
  9. Aric Lee

    Thank you very much for giving us these specific instructions to us, it was very helpful, and defiantly appreciate it.

    ReplyReport
  10. Aric Lee

    Thank you very much for giving us these specific instructions to us, it was very helpful, and definitely appreciate it.

    ReplyReport
  11. Infectedme

    If I was browsing in safari ‘privately’ will this infection be on my iPad ?

    ReplyReport
  12. Infectedme

    Before I do this …on my iPad …can you tell me what to do once what you say here is done? What should I expect to see as far as my Safari browser is concerned..? Will I have to re find all the web pages that I visit regularly…some not so regularly …that is why I saved them.

    ReplyReport
    1. Stelian Pilici

      In reply to Infectedme

      Hello,
      Once you close that page you won’t have any other side effects. Don’t need to worry! : )

      ReplyReport
  13. Justine

    Hi I have the fbi you need to pay us virus on my iPad I have seen several guides to unlocking by going into safari settings however I can’t even get that far, my screen is black with Apple on front occasionally flips blue then back to black again- I have tried hard reset but cannot get beyond this screen to get into the settings ? Please help !!

    ReplyReport

Report a comment

Reports are private and reviewed by a moderator.

Written by

Stelian

Stelian leverages over a decade of cybersecurity expertise to lead malware analysis and removal, uncover scams, and educate people. His experience provides insightful analysis and valuable perspective.

61,141 articlesWriting since 2011
More from Stelian →

MalwareTips community · since 2009

Stuck on a step? 75,000+ members can help you for free.

Post your question on the forum and our volunteer malware removal experts will walk you through it, step by step.

75K+members
999K+forum messages
100K+forum topics
17+years online

Previous

Remove Content Cleaner from SaveSoft (Uninstall Guide)

Next

How to remove Shell&Services Ads (Virus Removal Guide)

Share