Pop-up windows frequently mimic official bank notices or system security warnings to steal personal financial data.