Call #153 · 2026-10-19

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen cannot call you, so any number it gives leads to someone who wants remote access, not a fix.

“The caller asked to look at the laptop himself and was offered a lighthouse programme instead.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsUnsolicited contactRemote access request

script exhausted, no access, kettle pending · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Thank you for calling SafeNet Billing support, this is… sorry, hello, is this the householder? I'm ringing about the warning that's come up on your screen.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It treats a scary on-screen warning as real and positions the caller as the only one who can fix it.
Real company: A real security company never cold-calls about a pop-up. You contact them through a number you look up yourself.

                Bernard
                Oh — hello! SafeBelt, you said? Well, that's a new one on me. Now, which screen would that be, because I've got the television on and there's a chap doing something with a shed.
              
                Caller
                SafeNet, SafeNet Billing, sorry. The laptop screen, sir, the big red warning that's on it right now — that's a serious infection and it needs dealing with straight away.
              
                  Urgency or fearFake scan or planted problemsFake pop-up with phone number
                
A scary warning plus a tight deadline pushes people to act before they stop to check whether the warning is real.
Real company: A real security company does not cold-call about a warning on your screen, and legitimate software shows alerts inside its own window.

                Bernard
                Red, is it? The laptop's been sat in the hall since Tuesday, I've been meaning to bring it through. Now — before we get onto that, have you eaten? You sound like a young man who's skipped his lunch.
              
                Caller
                That's very kind, but I'm not here about lunch — I'm from the technical department at SafeNet Billing, and that warning on your laptop means your details are exposed. I'll be quick, can you just go and see if it's showing?
              
                  Fake authority or brand impersonationFake scan or planted problemsUnsolicited contact
                
A confident job title and a scary claim about exposed details make Bernard feel he must act fast.
Real company: A real billing company contacts you through official channels you can verify, and never cold-calls about a warning on your screen.

                Bernard
                Well, I'll have a look in a minute, but these slippers won't come off by themselves and one's gone right under the armchair. Have you got the weather nice where you are? It's turned a bit grey here.
              
                Caller
                Grey here too, yes. Look — while you're up, if you could just get to the laptop and let me have a look at it myself, I can clear this for you in two minutes, that's all it needs.
              
                  Remote access requestUrgency or fear
                
Offering to take over the machine feels like fast, expert help, and the promise of two minutes removes any reason to pause.
Real company: A real support team never asks to control your device from an unexpected call, and would book a verified appointment through official channels.

                Bernard
                Let me have a look at it? You mean through the telephone? Well — I suppose that's clever, but I've never got the hang of it. Do you need a special aerial for that, like the old tellys?
              
                Caller
                No aerial, no, it's — it's just a thing we use, very standard, you'd barely notice. Look, I'll be honest with you, sir, I've been at this all day and nobody's let me near a single laptop. Can we just — can we try, please?
              
                  Remote access requestUrgency or fear
                
The vague reassurance plus a plea for sympathy makes refusing feel rude, so the target agrees just to be helpful.
Real company: A real support team explains exactly what it needs and why, in writing, and never asks to control your device from an unexpected call.

                Bernard
                Oh, you poor thing. Tell you what, let me put the kettle on and you can tell me about your day properly. I've got a programme about lighthouses on in a bit — the 1987 one, lovely photography.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →