Call #133 · 2026-10-19

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A red warning on your screen is not a phone number, and a real company cannot see your computer unless you let it in.

“The caller asked after the engineer's health and offered tea while the infection supposedly spread.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

script exhausted, no access, no biscuit · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Good afternoon, SafeNet Billing support, you've reached the number on your screen — I can see the warning on your laptop from here, sir, so let's get that sorted before it spreads.
              
                  Fake pop-up with phone numberFake authority or brand impersonationUrgency or fear
                
It ties the call to a scary warning the person is already looking at, so the stranger feels like the answer to a problem.
Real company: A real security company does not cold-call from a pop-up, and a real warning tells you to open your own app or call the number on your bill.

                Bernard
                Oh — well — now, that's quick. SafeBelt, did you say? My slipper's gone under the chair, that's my afternoon sorted. But you can see my laptop from there? That's a clever sort of a job. Is it warm where you are?
              
                Caller
                SafeNet Billing, sir, and yes — I can see the warning on your screen right now, and I have to say it's getting worse while we talk. Your slippers can wait; this really can't.
              
                  Urgency or fearFake authority or brand impersonation
                
It creates panic by claiming the problem is growing second by second, so the person acts before thinking.
Real company: A real company states the issue plainly and gives you time to check it yourself through official channels.

                Bernard
                Getting worse, is it? It's not doing anything on my screen, it's just sitting there being red. I had a programme about lighthouses in 1987 that went on a bit like that. Would you like a cup of tea while we wait?
              
                Caller
                Red is exactly the state we don't want, sir — that's the infection showing through. And I'm speaking to you as an authorised SafeNet engineer, so I do need you to take this seriously rather than lighthouses.
              
                  Fake authority or brand impersonationUrgency or fear
                
Claiming an official title makes people accept the speaker's authority and stop questioning the warning.
Real company: A real security firm never cold-calls about an infection and never asks you to trust a title alone.

                Bernard
                An engineer, is it? Mavis will be thrilled, she likes a visitor. She's a parrot, mind, she'll only say hello and then go quiet. Oh — it was 1988, that lighthouse programme, I've got that wrong. What was it you wanted me to do with the red?
              
                Caller
                Right — thank you, sir, and please give Mavis my regards, but what I need is for you to let me have a look at the machine. If you just bring up the access screen and let me in, I can clear the red before it spreads.
              
                  Remote access requestUrgency or fearFake scan or planted problems
                
Asking to 'look at the machine' sounds like helpful service, and the warning that something will spread makes waiting feel dangerous.
Real company: A real support team never asks to connect into your computer from an unexpected call, and would give you a number you can verify yourself.

                Bernard
                Let you in? Oh, I don't think I know the way to do that, I'm not a technical sort. Hold on a moment — Mavis has knocked something off the side. Are you eating properly, by the way? You've got a thin sort of voice on you.
              
                Caller
                That's kind of you, sir, but I'm fine — honestly, nobody's asked me that all week, it's just... no, never mind. The thing is, if you can't do the access bit yourself I'm rather stuck, and this has been a long one.
              
                  Remote access requestUrgency or fear
                
The caller frames access as the only way forward and pairs it with a weary, personal appeal that makes refusing feel unkind.
Real company: A real support team never needs remote control of your device to fix a problem, and will happily explain the issue in plain terms instead.

                Bernard
                Oh, you sound like you could do with a sit-down and a biscuit, dear. Now — my slipper's gone under the chair, I can see one of them but not its friend. Did you say you were from Safebox Billing? I've got a drawer full of letters from them sort of people.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →