Call #173 · 2026-10-19

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen that tells you to call a number is an advert, and no real company needs remote access to fix it.

“The caller offered tea, the warning offered a number, and the machine stayed his.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problemsUnsolicited contact

script exhausted, kettle unboiled · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, good afternoon. You've reached us about the warning on your screen, is that right?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It confirms the scary screen was real and that calling was the correct next step, which makes the victim trust the voice.
Real company: A real security company does not staff a phone line for pop-up warnings and would never treat a pop-up as a real alert.

                Bernard
                Oh — hello there. Yes, there's a great red thing shouting at me. Safe... SafeNet, did you say? Only I had the radio on, and there was a programme about lighthouses, ever so interesting. Do you get many of these warnings yourself?
              
                Caller
                Yes — SafeNet Billing, that's us. But listen, I don't want to alarm you, that warning means your machine could be compromised at this very minute, so we'd want to deal with it quickly.
              
                  Urgency or fearFake authority or brand impersonation
                
A sudden threat of harm on your own machine pushes people to act before they think to check who is really calling.
Real company: A real security firm never phones from a pop-up warning, and would point you to its official support number instead.

                Bernard
                Compromised. Right. Oh — well — now, hang on, my slipper's gone under the chair. Sorry. You said compromised — is that like damp? We had damp in the porch, took ages to dry out.
              
                Caller
                Not damp, no. I'm calling from SafeNet Billing's security team, which is... the security side of the billing side — the point is, that warning is genuine and it's on your machine right now.
              
                  Fake authority or brand impersonationFake pop-up with phone number
                
A confident job title and a vague company name make the warning sound official, so people trust the voice over their own eyes.
Real company: A real security team names itself clearly and never treats a pop-up as proof of anything on your machine.

                Bernard
                The billing side of the security side. Gracious, that sounds like a lot of sides. Now, before we go any further — are you warm enough? It's turned bitter out. And have you eaten?
              
                Caller
                That's kind, but I'm fine — I'm on shift. Look, to clear this warning properly I just need to have a look at your machine myself, so if you let me have access to it, just briefly, we can sort it out.
              
                  Remote access requestFake scan or planted problemsUnsolicited contact
                
Offering to fix a problem he invented makes the stranger seem helpful rather than dangerous.
Real company: A real security team never asks to control your computer from an unexpected call, and would point you to support you contact yourself.

                Bernard
                Have a look at it, you say. Oh — I don't think I could manage that, I'm all fingers and thumbs. Mavis would help, only she's a parrot. My niece does the machine things, but she's in Spain.
              
                Caller
                Spain, right — well, I can be quicker than Spain. That's why I'm asking you to let me look, just so I can see the warning for myself and clear it off for you.
              
                  Remote access requestFake scan or planted problems
                
Offering to look himself feels helpful and fast, so the victim hands over control to end the worry.
Real company: A real software company never asks to connect to your computer from an unexpected call. It points you to its own support page.

                Bernard
                Clear it off. That's good, because the warning's got a great big number on the screen and it won't go away. Do you know, it's so bright I can see it from the kettle. Are you sure I can't get you a cup of something?

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →