Call #148 · 2026-10-19

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

No real company will ask you to let them into your computer over the phone to fix a warning on your screen.

“The caller asked for remote access and got a question about whether it needed feeding.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearUnsolicited contactRemote access requestFake scan or planted problems

nothing gained, kettle boiled instead · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, good afternoon. You're through to the billing support line — am I speaking with the person whose screen is showing our warning?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller already knows about the warning on the screen, so the target assumes the number must be genuine.
Real company: A real security firm never puts a phone number in a warning pop-up and never calls you about it.

                Bernard
                Oh — hello there. Now, is that SafeBelt you said? Only the screen says something with a net in it, but my glasses are upstairs. Are you warm enough where you are? It's turned quite chilly here.
              
                Caller
                SafeNet, yes — Billing Support. The important thing is that warning on your screen isn't a small thing, it needs sorting before it does any damage, so I'll be quick.
              
                  Urgency or fearFake authority or brand impersonation
                
Naming a scary warning and a deadline pushes the person to act fast before they can think or check.
Real company: A real security firm never cold-calls about a warning on your screen, and never rushes you to fix it.

                Bernard
                Right, SafeBelt, got you. Before you're quick, though — are you eating properly? My cousin Gerald sold insurance, and he never ate a proper lunch. Oh, and the budgie next door does the phone, would you believe.
              
                Caller
                SafeNet Billing, sir, and I'm speaking to you as an authorised officer of the billing department — so if we could focus on that warning still sitting on your screen.
              
                  Fake authority or brand impersonationUnsolicited contact
                
A title and a department name make the caller sound official, so people stop questioning whether the call should exist at all.
Real company: A real billing team writes to you through the contact details on your own account, and never cold-calls about a warning on your screen.

                Bernard
                An authorised officer, well I never. Hold on, the kettle's just clicked, back in a tick. Now — which warning was it? The screen's gone a funny blue and Mavis is shouting at it.
              
                Caller
                Yes, that's the one — that blue screen is exactly the sort of thing we flag. Now, to clear it properly I'll need to have a look at your machine myself, so if you just let me into it we can get this done in two minutes.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
Asking to connect to the computer feels like expert help, and the short time limit stops Bernard from pausing to check.
Real company: A real software company never asks to connect to your computer from an unexpected call, and would point you to its official support page instead.

                Bernard
                Have a look at it yourself? Oh, you'd be very welcome, it's a bit of a bungalow though — there's nowhere to park. Would you be coming by bus? Gerald always took the bus.
              
                Caller
                No, no — not in person, sir, over the line. I just need you to let me have access to the computer so I can see what's on that screen. That's all it is.
              
                  Remote access requestFake scan or planted problemsUnsolicited contact
                
Asking to 'just see the screen' sounds small and helpful, so the victim lowers their guard before anything is taken.
Real company: A real support team never asks to connect to your computer from an unexpected call. You call them, not the reverse.

                Bernard
                Over the line, like a sort of telephone engineer for the computer. Well now. Does it need feeding, this access? Only Mavis gets frightfully jealous if I've got something new in the room.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →