Call #188 · 2026-10-20

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen with a phone number is bait. No real security team asks to connect to your machine after a pop-up.

“The red triangle warned of infection. The caller offered tea, glasses, and a green tool instead.”

Fake pop-up with phone numberFake authority or brand impersonationFake scan or planted problemsUrgency or fearRemote access request

nothing gained, one kettle wasted · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, good afternoon. You're ringing about the warning on your screen, is that right?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It confirms the scary warning the person just saw, so the call feels like a response to a real problem rather than a cold approach.
Real company: A real security company does not phone people who saw a pop-up, and it never treats a screen warning as proof of a problem.

                Bernard
                Oh — well — now, is that SafeNest? Like the bird's nest? Because the thing on my screen is a big red sort of… triangle. Hang on, Mavis is doing that noise again. Mavis. Mavis! Sorry. Say that again, dear?
              
                Caller
                SafeNet, yes, not the nest one. And that red triangle means your machine is badly infected right now, so we really do need to get to it before it spreads.
              
                  Fake scan or planted problemsUrgency or fear
                
A scary warning plus a ticking clock pushes people to act before they think to check.
Real company: A real security firm never cold-calls about an infection and would point you to its own app or website.

                Bernard
                Infected, you say. Oh dear. The budgie next door has learned the telephone, you know — rings all hours, it's a menace. Is that the sort of infection? No? Right. Before it spreads to where, dear?
              
                Caller
                No, sir, not a bird — the infection is on the machine, and it spreads to your files. I'm with SafeNet Billing's security division, and I need you to look at the warning for me.
              
                  Fake authority or brand impersonationFake scan or planted problems
                
A confident job title and a vague threat make the listener trust the caller and fear for their files.
Real company: A real security team contacts you through official channels you can verify, not a number from a pop-up.

                Bernard
                Ah, the security division. Very good. Now then — would you like a cup of tea while we do this? The kettle's only just gone off. And the warning, you said — the red triangle one with the shouting about my files?
              
                Caller
                I'll be quick, sir, no tea needed. Yes, that red triangle — if you just let me have a look at the machine, I can clear the whole thing off for you.
              
                  Remote access requestFake scan or planted problems
                
Offering to fix the scary warning makes handing over control feel like the helpful next step.
Real company: A real software company never asks to connect into your computer from an unexpected call. It points you to its own support page.

                Bernard
                Well, you can't have a look from there, surely? Oh — you mean at the thing on the screen. Hold on, I'm fetching my glasses. The good ones. Or are these the good ones? Do you take sugar?
              
                Caller
                No sugar, sir, and yes — at the screen, through the little tool we use. I'll be quick, just let me connect and I'll have that warning gone in a minute.
              
                  Remote access requestFake scan or planted problems
                
Offering to fix a problem he invented makes the victim feel helped rather than robbed, and speed stops them thinking.
Real company: A real software company never calls about a warning on your screen and never asks to connect to your computer.

                Bernard
                There was a cousin of mine sold insurance for years, did very well at it, so I know how these things go. Now — through a little tool, you said. Does that come in green? Only the front room's green, you see. Mavis would have opinions.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →