The scam often starts with a pop-up, call, or message claiming a virus or hacked account, then leads to payments, stolen data, or remote control of your device.