Call #163 · 2026-10-19

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that tells you to call a number is not from your computer, and no real support line needs to look through your screen.

“The caller never got past the slipper, the gas bill or the parrot, and the machine stayed shut.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

nothing gained, kettle on, no access · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, good afternoon. I understand you've got a warning up on your screen — I'll be quick, just tell me what it says.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller already knows about the warning, which makes them seem official and makes the target feel the problem is real.
Real company: A real company never calls about a pop-up and asks you to read it aloud. You would contact them through a number you look up yourself.

                Bernard
                Oh — well — now, hold on. It's gone and covered the whole thing, the screen. Wiped out my programme about lighthouses, actually — did you ever see that one? Nineteen eighty-seven, I think. Anyway, you said Safe... Safe something, was it?
              
                Caller
                SafeNet Billing, yes. Never mind the lighthouses, sir — that warning means your machine is compromised right now, and every minute you leave it the worse it gets.
              
                  Urgency or fearFake authority or brand impersonation
                
It turns a vague warning into a ticking clock, so the person acts fast instead of checking.
Real company: A real security firm never phones from a pop-up and never claims your device is infected without proof.

                Bernard
                Compromised. Hmm. Now, is that anything like my slipper? Only one of mine's gone right under the chair and I can't reach it without kneeling, and I'm not kneeling.
              
                Caller
                That's not — no, sir, it's nothing like a slipper. It's a security warning, from us, the people who look after the systems — and I'll be quick, I just need you to read the reference off that screen.
              
                  Fake authority or brand impersonationUrgency or fear
                
Claiming to be the authority behind the warning makes the listener accept the problem as real and stop questioning it.
Real company: A real security team names itself clearly and points you to a number on your account or official website, not one on a pop-up.

                Bernard
                Oh, the people who look after it. Well, that's a relief. Now — the telly said a lot of companies do billing these days. Is this the gas? Only I've gone and paid the gas already, or I think I have.
              
                Caller
                No, not the gas — SafeNet Billing, security billing, it's all in the warning right there. Look, I'll be quick: I just need to get onto your machine to clear it, so if you let me have a look at it, we can sort this out.
              
                  Remote access requestFake pop-up with phone numberUrgency or fear
                
Offering to fix the problem creates relief, so the person hands over control before checking whether the warning was real.
Real company: A real security company never asks to log into your computer from an unexpected call. It tells you to contact support through its official website.

                Bernard
                Let me have a look at it. Right you are. Now, do I need to fetch my glasses for that? Only they're in the kitchen with the kettle and I've just put it on.
              
                Caller
                No glasses needed, sir, it's — look, it's not that sort of look. I'd be the one looking, through the connection, that's rather the point. Could you just let me onto the machine, please?
              
                  Remote access request
                
Asking to be let onto the machine sounds like a routine fix, so the person feels helpful rather than suspicious.
Real company: A real support team never asks to connect to your computer from an unexpected call. You call them, not the reverse.

                Bernard
                Oh, you'd be looking. Through the connection. Well now, that's clever, that is. So you'd see all my photographs, would you? There's one of Mavis on there I'm rather fond of. She's a parrot.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →