Call #183 · 2026-10-19

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that tells you to call a number is bait, and no real support needs to look at your machine without being asked.

“The caller asked to look at the machine and got a parrot named Mavis instead.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsUnsolicited contactRemote access request

script ran out, nothing gained · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing support, good afternoon — you're through about the warning that's come up on your screen. Could you confirm you're seeing it right now, sir?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It treats a scary pop-up as already proven and asks him to confirm it, so he accepts the problem as real.
Real company: A real company never phones you about a pop-up and never asks you to confirm a warning on your screen.

                Bernard
                Oh — well — now, is that "Safeway Billing"? Only I've got a screen here with a great red thing on it, and Mavis has gone very quiet about it. Is she all right, do you think?
              
                Caller
                SafeNet, sir, with an N — and Mavis being quiet is rather the point, I'm afraid. That warning means it's already spreading, so I really do need you to confirm what you can see before it goes any further.
              
                  Urgency or fearFake scan or planted problemsUnsolicited contact
                
It turns silence into proof of danger, so the listener feels that waiting is itself the risk.
Real company: A real security team gives you time, a reference number, and a way to call back on a number you look up yourself.

                Bernard
                Spreading? Oh dear. Hold on — one of my slippers has gone right under the chair and I can't reach it with my foot. Would it get into the slippers, do you think?
              
                Caller
                No, sir, it won't get into your slippers — it's a data thing, not a carpet thing. But it spreads fast, so while you're down there, is the warning still up on the screen?
              
                  Fake authority or brand impersonationUrgency or fear
                
A calm joke about slippers disarms the listener while the question about the warning keeps them staring at a fake screen.
Real company: A real security team never phones about a pop-up, and it never asks you to read a warning aloud.

                Bernard
                Well I can't see it from down here, can I. Give me a moment — right, yes, still there. Great big red. Now then, are you warm enough where you are? It's gone terribly grey out.
              
                Caller
                I'm quite warm, thank you, sir — the heating here is on far too high, actually. Now, that red screen won't fix itself; if you just let me have a look at your machine from my end, I can sort it out in a few minutes.
              
                  Remote access requestFake pop-up with phone number
                
Offering to take over the computer feels like helpful service, so the victim hands over control without suspecting anything.
Real company: A real support team never asks to connect to your computer from an unsolicited call. You call them, through a number you look up yourself.

                Bernard
                Have a look from your end — how would that work, then? Is it like the lighthouses? I watched a lovely programme about lighthouses in 1987, you know. Well — 1988. They had a fellow on who lived in one.
              
                Caller
                Honestly, sir, some days I think I'd rather live in a lighthouse myself. But no — a proper look means getting on the machine with you, so can we set that up before that red screen does any damage?
              
                  Remote access requestUrgency or fear
                
It pairs a friendly chat with a ticking clock, so the request to get onto the machine feels like help rather than intrusion.
Real company: A real support team never takes remote control from a cold call, and would point you to official contact details you look up yourself.

                Bernard
                Damage, right. Now, would this looking-at-it business need feeding? Only Mavis gets a bit put out if I'm on the phone too long. She's a parrot.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →