Call #193 · 2026-10-20

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A pop-up warning with a phone number is an advert for a scam, and no real company can fix your computer from their end.

“He offered tea, mentioned a slipper, and asked who authorised it. The script never recovered.”

Fake pop-up with phone numberUrgency or fearFake authority or brand impersonationRemote access request

nothing gained, kettle on · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you've reached the support line — is this about the warning on your screen, sir? I'll be quick, because that machine's in a bad way and we need to sort it before it gets worse.
              
                  Fake pop-up with phone numberUrgency or fearFake authority or brand impersonation
                
It ties the call to a scary warning already on the screen, so the target believes the problem is real and time is short.
Real company: A real company never calls you because of a pop-up, and never rushes you to fix a machine you did not report.

                Bernard
                Oh — well — now. SlackNet, is it? The warning, yes. It's been sitting there all afternoon, very orange. I did wonder if it was one of those adverts. Hold on, my slipper's gone under the chair — only the one, mind.
              
                Caller
                It's not an advert, sir, it's a genuine warning and it's been sitting there all afternoon getting worse — that's how these things spread. Your slipper can wait; the machine really can't.
              
                  Urgency or fearFake pop-up with phone number
                
It reframes a fake warning as a worsening emergency so the person acts before thinking it through.
Real company: A real security warning never arrives as a pop-up with a phone number, and no real firm rushes you off your feet.

                Bernard
                Getting worse, you say. Well, it can't get much orange, can it. Do you take sugar? Only I'm putting the kettle on and it's no trouble. Mavis has been squawking at it — the warning, not the kettle.
              
                Caller
                No sugar, thank you — and forget the kettle, this is SafeNet Billing, we don't do house calls for tea, I'm afraid. Look, that warning's from us directly, authorised, so we're the only ones who can stand it down.
              
                  Fake authority or brand impersonationFake pop-up with phone number
                
Claiming to be the source of the warning makes the call feel like the official fix rather than a stranger's approach.
Real company: A real security firm contacts you through its own app or a verified number, never by phoning the number on a pop-up.

                Bernard
                From you directly, is it. Oh — that's a relief. Hmm, that's funny, I thought you said SlackNet a moment ago. Mind you, my left ear's no good at all. The kettle's nearly there. How long have you been on the go?
              
                Caller
                SafeNet, sir, always SafeNet — the line crackles a bit, that's all. I'll be quick, because the only way to stand the warning down is if I can just have a look at the machine myself from here.
              
                  Remote access requestUrgency or fearFake authority or brand impersonation
                
A calm, friendly voice offering to fix the problem himself feels helpful, so the target hands over control without pausing to check.
Real company: A real security company never asks to take remote control of your computer from an unexpected call. It tells you to contact them through official channels.

                Bernard
                Have a look at it. Well — you're very welcome to look at it, I'm sure it's a nice machine, my nephew picked it out. But it's a bit like having a look at my kitchen from your kitchen, isn't it? Doesn't quite work. Oh — hold on, Mavis has found my slipper.
              
                Caller
                That's exactly it, sir, you've put your finger on it — it doesn't work from here, which is why I need you to let me in at your end. It's all authorised, always is.
              
                  Remote access requestFake authority or brand impersonation
                
It reframes a request for control of your computer as routine and pre-approved, so refusing feels unreasonable.
Real company: A real support team never needs to log into your device, and would say so plainly.

                Bernard
                In at my end. Oh — well. Now then, I had a programme about lighthouses in nineteen eighty-seven, and they had a fella at the top of the lighthouse who let nobody in at all, and it was quite the thing. Is it like that? Authorised by who, sorry?

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →