Call #103 · 2026-10-19

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen is not a phone call, and no real support line will ask to look inside your machine from theirs.

“The caller offered a look inside the machine. Bernard offered tea and a slipper update instead.”

Fake pop-up with phone numberUrgency or fearFake authority or brand impersonationRemote access requestFake scan or planted problems

warning unread, kettle off, nobody let in · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, good afternoon — you're through to the support line for the warning on your screen. That's a serious one, so I'll be quick.
              
                  Fake pop-up with phone numberUrgency or fearFake authority or brand impersonation
                
It ties the call to something already on the screen, so the warning feels real and the caller feels like the fix.
Real company: A real security company never puts a phone number in a warning pop-up and never calls you about it.

                Bernard
                Oh — well — now, that's a relief, someone answering. Only it says SafeNest on my screen, not SafeNet. Does that matter? Perhaps it's the same firm with a different hat on.
              
                Caller
                SafeNet, yes, that's us — SafeNest is just the logo, don't worry about that. The reason I'm ringing— well, you rang me— is that warning's been flagged as urgent, so we really do need to sort it now.
              
                  Urgency or fearFake pop-up with phone number
                
Pushing for speed stops the person from pausing to check the odd name mismatch or to think clearly.
Real company: A real security firm never rushes you off a warning pop-up and would happily let you call back on a number you look up yourself.

                Bernard
                Urgent, is it. Reminds me of a programme about lighthouses, back in — oh, it must have been 1987 — they were urgent too, but slowly. Anyway, I've lost a slipper under the chair, so I'm a bit at sixes and sevens. Tea?
              
                Caller
                No tea, thank you, and the slipper can wait — this is genuinely urgent. As an authorised SafeNet engineer, I can confirm that warning means your machine is compromised right now.
              
                  Fake authority or brand impersonationUrgency or fear
                
Claiming a title and a brand makes the warning sound official, and the urgency stops anyone pausing to check.
Real company: A real security firm never calls out of the blue to announce an infection, and never claims authority over your own machine.

                Bernard
                Compromised. Right. And is that — sorry, my left ear's a bit funny — is that something that spreads, like damp? Only my Mavis is in the front room by the laptop, and I'd not want her catching anything.
              
                Caller
                Damp, yes — a bit like damp, it spreads. Which is exactly why I need eyes on it; if you just let me have a look at your machine, I can clear the whole thing from here.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
Offering to fix the problem personally makes the caller seem helpful, so the victim hands over control to stop the imagined spread.
Real company: A real support team never asks to connect to your computer from an unexpected call. You call them, not the reverse.

                Bernard
                Have a look — from there? Is it like the telly, then, do I turn it to a certain channel? Hold on, the kettle's just clicked off. I'll not be a moment.
              
                Caller
                No channel, no — I don't need the kettle, I need you at the laptop. That's great news you're nearly there, so just to confirm, can you let me into the machine so I can see what we're dealing with?
              
                  Remote access requestUrgency or fear
                
Asking to be let into the computer sounds like a technician helping, so the victim hands over control without realising what it allows.
Real company: A real support team never takes remote control of your device from a cold call. You call them, on a number you look up yourself.

                Bernard
                Oh — well — now, that. Let me get my glasses. The thing is, when I went to the laptop I had a proper look at that warning, and it says the price of things in a currency I don't recognise. Would that be the damp, do you think?

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →