Call #178 · 2026-10-19

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen is never a reason to let a stranger look inside your computer.

“The caller offered tea, the caller offered a budgie, and the warning got no closer to being cleared.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

nothing gained, kettle boiled instead · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, good afternoon. You're seeing the warning on your screen, yes? That's the one we sent about your machine.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It treats the pop-up as proof of a real problem, so the warning seems to come from a company that already knows about it.
Real company: A real security company never sends warnings that tell you to phone a number, and never calls you about a pop-up.

                Bernard
                Oh — well — now. SafeBelt, did you say? My cousin was in insurance, you know, sold it door to door in the rain. What was I — oh, the screen. Yes, there's a big red thing sat there. Mavis doesn't like it.
              
                Caller
                SafeNet, yes, Billing. And that red thing isn't just an advert, sir — it's a live warning, and every minute it sits there things get worse. We really do need to deal with it quickly.
              
                  Urgency or fearFake pop-up with phone number
                
A ticking clock shuts down careful thinking, so the person acts on the warning before checking whether it is real.
Real company: A real security firm never phones from a pop-up and never claims a warning gets worse by the minute.

                Bernard
                Every minute, is it? That does sound quick. Hold on a tick, the kettle's just clicking off. Oh — while I'm up, would you like a cup? I've got the ordinary kind, none of that fancy stuff.
              
                Caller
                That's very kind, but I'm on the clock here — SafeNet doesn't stop for tea. So if you'd just look at the red warning for me and we'll get you sorted.
              
                  Fake authority or brand impersonationUrgency or fear
                
A confident brand name plus a ticking clock makes the warning feel official and makes pausing feel risky.
Real company: A real security firm never phones from a pop-up and never rushes you. It publishes contact details you can check yourself.

                Bernard
                SafeNet, that's the ticket. Now — the red thing. It's got a little picture of a padlock on it. Is that meant to be there? Because I had one on the garden shed that kept jamming, and my neighbour said just give it a squirt of the oil.
              
                Caller
                No oil, sir, please don't — put nothing near it. The padlock's part of the warning, it means your machine's locked down, and the only way to open it is if I have a look inside it for you. I'll be quick.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
It turns a scary warning into a simple offer of help, so the person feels relief at handing over control.
Real company: A real security company never asks to look inside your machine after a pop-up. It tells you to close the window and contact support yourself.

                Bernard
                A look inside, is it? Oh — well. Hold on, there's a budgie next door that's learned this phone. Rings all hours, it's a menace. Would you believe it, it does the voice better than me. Where were we?
              
                Caller
                Look inside the computer — that's where we were, sir. If you just let me have a look at it, I can clear the whole red thing off and you can get back to your budgie. I'll be quick.
              
                  Remote access requestFake scan or planted problems
                
Offering to fix a scary problem he did not create makes handing over control feel like the helpful next step.
Real company: A real support team never asks to take over your machine from an unexpected call. You call them, not the reverse.

                Bernard
                The budgie's not mine, mind. Mine's Mavis, a parrot, and she's a biter. Now — let me have a look. Does this need the glasses? Because I've got a cousin sold insurance for years and he never once read the small print.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →