Call #218 · 2026-10-20

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A pop-up with a phone number is not a security alert. Close it and call nobody from it.

“The engineer asked for the machine. Bernard offered tea, then a password he did not have.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

script exhausted, no access, kettle boiled · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Good afternoon, SafeNet Billing here, you're through to the billing security line. I understand there's a warning up on your screen — that's why you rang, isn't it?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It confirms the caller already knows what the person is looking at, which feels like proof the warning is real and the call is official.
Real company: A real security team never relies on a pop-up to start a call, and would point you to the number on your own bill or card.

                Bernard
                Oh — well — now, is that the SafeNest people? Only there's a great blue thing covering the whole screen, and I can't get at my crosswords. My cousin Dennis sold insurance, you know. Would you like a cup of tea while we sort it?
              
                Caller
                It's SafeNet, yes — and I'll skip the tea, thank you, but let's not get distracted. That blue thing is the warning, Bernard, and it means the infection is active right now, so we've very little time before it spreads.
              
                  Urgency or fearFake authority or brand impersonation
                
A ticking clock stops people from pausing to check whether the warning is real.
Real company: A real security firm explains the issue in writing and never rushes you off the phone.

                Bernard
                Active, is it? The budgie next door has learned the telephone, would you believe — says hello in a lady's voice. Anyway. Spreads to what, dear? Does it want feeding?
              
                Caller
                Spreads to the rest of the machine, Bernard — and no, nothing wants feeding. Now I need to get into the system as an authorised SafeNet engineer, so if you'd just let me take a look at it, we can deal with this properly.
              
                  Fake authority or brand impersonationRemote access request
                
Claiming an official engineer role makes the request to access the machine sound routine and authorised.
Real company: A real security firm never cold-calls to fix a virus and never asks to take over your computer on the spot.

                Bernard
                Take a look at it — from where you are? That's clever. Hang on, the kettle's just going off. — Sorry. Where were we? You were saying about your friend the engineer.
              
                Caller
                Not my friend — I am the engineer, and I need to see the screen for myself. If you let me into the machine, just for a few minutes, I can clear this warning off before it does any real harm.
              
                  Remote access requestUrgency or fearFake authority or brand impersonation
                
                Bernard
                Oh, you're the engineer yourself. Well, I'm all thumbs with it, but my glasses have gone missing so I wouldn't see much anyway. Would a few minutes be enough, do you think? It's a very big blue thing.
              
                Caller
                A few minutes is all I need, Bernard — the warning itself tells me everything. Look, I don't want to go round in circles here; could you just let me have access to the computer so I can actually do my job?
              
                  Remote access requestUrgency or fear
                
                Bernard
                Round in circles, yes, I know that feeling — my cousin Norman sold insurance and he'd talk till the cows came home. Lovely fella. So what's the password for this machine of yours, then? Only I don't seem to have one.
              
                Caller
                Forget it. I'm putting the phone down now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →