Call #123 · 2026-10-19

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives with a phone number to call is fake. Real companies do not phone you about a pop-up you did not ask for.

“The remote session never started because the cushion had to be moved and the parrot objected.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problemsUnsolicited contact

no access gained, kettle boiled instead · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Good afternoon, SafeNet Billing support, you've reached the number on the warning. I can see your machine is flagging a serious infection, so I'll be quick — is the laptop in front of you right now?
              
                  Fake pop-up with phone numberFake authority or brand impersonationUrgency or fear
                
It borrows the authority of a warning the person just saw and adds time pressure so they answer before thinking.
Real company: A real security company does not call the number in a pop-up, and it never phones you first about an infection.

                Bernard
                Oh — now — SafeBelt, did you say? It's in front of me, yes, only I can't read it because my glasses have gone under the chair with my slipper. Is that the warning with the red on it?
              
                Caller
                SafeNet, yes — and that red warning is the urgent one, so we really do need to act fast before it spreads. Can you see the big alert on the screen at all?
              
                  Urgency or fearFake pop-up with phone number
                
A visible warning plus a ticking clock makes people act before they stop to check whether the warning is real.
Real company: A real security firm never phones about a pop-up and never pushes you to hurry. It waits for you to contact it.

                Bernard
                Well, I can see something large and red, but I've got it behind a cushion because it was making Mavis shout. She's a parrot. Would you like a cup of tea while we sort this out?
              
                Caller
                No tea, thank you — but you've hidden the alert, so I need you to bring it back up where I can walk you through it. And I'll be quick, this is a certified security matter.
              
                  Fake authority or brand impersonationUrgency or fear
                
Claiming a certified security matter makes the caller sound official and makes Bernard feel he must obey quickly.
Real company: A real security team never phones from a pop-up and never rushes you. They contact you through official channels you can verify.

                Bernard
                Under the cushion, right. Oh — but if I move that cushion Mavis will start up again. Hold on a moment, there's a kettle clicking. Back now — where were we?
              
                Caller
                Right, here's the thing — I can't fix this from my end, so I just need to have a look at your machine myself. It's a quick remote session, nothing to be nervous about.
              
                  Remote access requestFake scan or planted problems
                
Offering to look at the machine yourself feels helpful and personal, so the target lowers their guard.
Real company: A real support team never asks to take over your computer from a cold call, and would point you to official contact details.

                Bernard
                Have a look at it yourself — from where, though? Are you local? Only I was going to say, it's not a laptop, it's the big grey one the boy set up, and it lives in the back room with the lighthouses programme.
              
                Caller
                From our end, yes — you just let me in and I take it from there. Grey one, lighthouse room, fine, doesn't matter which machine it is.
              
                  Remote access requestUnsolicited contact
                
It makes handing over control of your computer sound like a small, routine step so you stop weighing the risk.
Real company: A real support team never takes remote control of your device from a cold call, and would point you to official contact details.

                Bernard
                Oh, the lighthouse one. It was on in nineteen eighty-seven, I think — or eighty-eight. No. Eighty-eight. There was a chap on a rock, and a parrot, funnily enough. Are you eating properly, by the way? You sound a bit rushed.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →