Call #23 · 2026-10-18

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

No real company will ask to look at your computer remotely to fix a warning that appeared on your screen.

“The caller offered tea and a visit, the other end asked to be let in through the machine.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

remote access refused, kettle unboiled · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, good afternoon — you're through because of the warning on your screen, yes? I'll be quick, I just need to confirm what it's showing you.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller treats the pop-up as already proven, so the person believes the warning is real and the call is the fix.
Real company: A real security company never phones you from a pop-up. You would look up their number yourself and call them.

                Bernard
                Oh — well — now. Safeway Billings, is it? I've got the telly on in the other room, so you'll have to speak up a touch. What was it you wanted confirmed?
              
                Caller
                SafeNet Billing. I need you to confirm what the warning on your screen says, and I'll be honest, it's the sort of warning you don't want sitting there much longer.
              
                  Urgency or fearFake authority or brand impersonation
                
A vague threat with a ticking clock pushes people to act before they stop and think.
Real company: A real billing team states the charge in writing and never rushes you off the phone.

                Bernard
                The warning — yes, well, it's a big blue thing and it's got a lot to say for itself. Reminds me of that programme about lighthouses, 1987, the one where the keeper never got a word in edgeways. Do you want me to read it out, or shall I put the kettle on first?
              
                Caller
                No kettle, no lighthouses — this is an official matter and the warning's been flagged at our end. I'll be quick: just read me the first line you can see, and mind, it's time-sensitive.
              
                  Fake authority or brand impersonationUrgency or fear
                
Claiming official authority plus a ticking clock stops the person from pausing to check who is really calling.
Real company: A real organisation writes to you through its official app or posted letter, and never rushes you on a phone call.

                Bernard
                Time-sensitive, right you are. Now then — first line. Hang on, I've got to find my glasses. They were on my head a moment ago, that's the way of it. Ah — and one of my slippers has gone under the chair, bold as brass. Won't be a tick.
              
                Caller
                Leave the slippers — the glasses'll do. And while you're up, if you'd just let me have a quick look at the machine myself, we can sort this out in a moment.
              
                  Remote access requestFake scan or planted problems
                
Asking to look at the machine himself sounds like helpfulness, so the victim hands over control without noticing.
Real company: A real support team never takes remote control of your computer from an unexpected call, and will tell you to call the number on your bill.

                Bernard
                Let you look at it? Well, you're very welcome to call round, I've got a decent pot of tea and Mavis would like the company. But you're not local, are you — how would you be getting here?
              
                Caller
                No, not round — remotely, through the machine, that's how we work. Just a quick look at my end, nothing for you to do except let me in.
              
                  Remote access requestFake scan or planted problems
                
Offering to do the work 'at my end' makes it feel effortless and safe, so the victim lowers their guard and hands over control.
Real company: A real support team never takes remote control from an unsolicited call, and will tell you to call the number on your bill or official website.

                Bernard
                Through the machine. Well, I never. It'd need feeding, would it, this remote thing? Only I had a budgie years ago and it was more trouble than the parrot. Oh — the glasses were on the table all along.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →