Call #118 · 2026-10-19

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen is not from a company, and no real one needs remote access to fix it.

“The caller offered remote access four times and got a description of the front step instead.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

script exhausted, no access, kettle on · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, good morning. You've done the right thing ringing the number on the warning — that message on your screen is about your machine, and I'll be quick.
              
                  Fake pop-up with phone numberFake authority or brand impersonationUrgency or fear
                
Praising the person for calling makes them feel smart and committed, so they stay on the line and trust the next step.
Real company: A real security company never puts a phone number in a warning pop-up and never asks you to ring it.

                Bernard
                Oh — well — now. SafeNet, you said? I had it down as Sage Nest, like the stuffing. Is your machine the one that's poorly, or is it mine? I've got the kettle on, so I'm all ears.
              
                Caller
                No no, it's your machine that's poorly, that's the whole point of the warning on your screen. And it's spreading as we speak, so I'll be quick — have you still got the screen in front of you?
              
                  Urgency or fearFake pop-up with phone number
                
A ticking clock stops the person from pausing to check whether the warning is even real.
Real company: A real software company never phones about a pop-up, and gives you time to verify through official channels.

                Bernard
                I have, yes — big orange thing, very bold. It's got a number on it, and I thought, that's a lot of nines. Mavis has been squawking at it. Do you want to hear her?
              
                Caller
                The message is what matters, not the bird — can we focus on the warning for a moment? I'll be quick: that warning comes directly from us, we're the people behind the software, and it needs looking at today.
              
                  Fake authority or brand impersonationUrgency or fear
                
Claiming to be the company behind the software borrows instant trust and makes the warning feel official.
Real company: A real software company contacts you through its own app or website, never through a pop-up telling you to call.

                Bernard
                You're behind the software, are you. Well, that's a relief. Only the budgie next door has learned our phone — mimics the ring perfectly, drives Mavis mad. Does your software need feeding, or is it more of a plant?
              
                Caller
                It's not a plant, sir, it's the software on your machine, and it's infected — that's rather the point. Look, I just need to get onto your computer and have a proper look at it, so if you'd let me have access for five minutes we can get this sorted.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
Asking to connect to the computer turns a vague scare into action, and the short time limit stops Bernard from thinking it through.
Real company: A real software company never calls to ask for remote access to your computer, and never asks you to install anything to fix a problem you did not report.

                Bernard
                Get onto it — you mean pop round? I could put the kettle on properly then. Mind you, my knees aren't what they were, so you'd have to take the step at the front slow.
              
                Caller
                No, not round — nobody's popping round. I mean remotely, on the machine, the computer itself, so if you'd just let me in for a moment... sorry, what step?
              
                  Remote access requestFake pop-up with phone number
                
Asking to be let in remotely sounds like routine help, and the stumble makes it feel unscripted and human.
Real company: A real support team never asks to connect to your computer from an unexpected call. You call them, on a number you looked up yourself.

                Bernard
                The one at the front, it's a bit crumbly. Oh — you mean through the wires. My cousin Dennis sold insurance that way, never left his chair. He was no good at it. Shall I go and look at the warning again?

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →