Call #128 · 2026-10-19

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen is not a phone call, so never ring the number it shows or let anyone talk you into remote access.

“The call spent its urgency on a man who was busy finding his glasses and worrying about the parrot.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

warning unread, kettle unanswered, nothing gained · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, good afternoon — you've reached us about the warning on your screen, yes? I'll be quick, I just need to confirm what it's telling you.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It treats the scary pop-up as already proven and invites the person to read it aloud, so the warning feels confirmed rather than questioned.
Real company: A real security company never relies on a pop-up with a phone number, and would point you to its official app or website to check.

                Bernard
                Well, now, that's a grand total of things up there, isn't it? SafeBelt, did you say? My cousin Derek sold insurance, you know, whole thing confused him too. What was it you wanted me to look at?
              
                Caller
                SafeNet Billing, sir, and I'll be quick — that warning means your machine is broadcasting right now, this minute. So forget the cousin and tell me what the box on your screen is saying.
              
                  Urgency or fearFake scan or planted problemsFake authority or brand impersonation
                
A ticking clock plus a scary claim about the computer pushes the person to act before they can think or check.
Real company: A real security company never phones out of the blue about a warning and never rushes you to read your screen aloud.

                Bernard
                Broadcasting, is it? Like the radio. Mavis hates the radio, she squawks something dreadful when the shipping forecast comes on. Which box did you mean, the big one or the little one?
              
                Caller
                The big one, sir, the big screen — and Mavis is a budgie, yes, so I'd keep her away from it. Just read me what the warning box says, it's rather urgent.
              
                  Fake authority or brand impersonationUrgency or fear
                
A calm, friendly tone plus a small joke lowers the listener's guard while the word urgent pushes them to act before thinking.
Real company: A real security team never phones from a pop-up and never asks you to read a warning aloud. They wait for you to call the number on your bill.

                Bernard
                Mavis is a parrot, actually. The budgie belongs to the lady next door — it's picked up the phone, you know, answers it before I do. Hold on, the kettle's just going.
              
                Caller
                A parrot, right, my mistake — sir, please, leave the kettle. The warning won't wait, and I can't see it from here, so I need you to read it out to me.
              
                  Remote access requestUrgency or fear
                
It rushes the person past the warning and makes reading the screen feel like helping, so they stop checking.
Real company: A real support team never asks you to read out a warning or hand over control of your device from a cold call.

                Bernard
                Oh, it won't wait, will it. Well — I've got my reading glasses somewhere, hang on. They're usually on top of the biscuit tin, have you had your tea? You sound like a young man who skips his tea.
              
                Caller
                That's kind, sir, but I don't have time for tea — your machine is infected and it's spreading as we speak. Just the first line of that warning, that's all I need.
              
                  Urgency or fearRemote access request
                
A ticking-clock threat makes the target act fast and skip the sensible step of checking whether the warning is real.
Real company: A real security team never calls out of the blue about an infection and never asks you to read out codes or grant access.

                Bernard
                Spreading where, though? The kitchen's only little — oh, you mean the internet. My cousin Dennis sold insurance, always said never sign anything on a Friday. Which line was it you wanted?

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →