Call #233 · 2026-10-20

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A pop-up that tells you to call a number is not a warning, it is an advert for the caller. Real support never phones you first.

“The screen team pressed to reach into the machine. Bernard asked about the weather and the back step, and the line went quiet.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problemsUnsolicited contact

caller gave up the phone, nothing opened, no loss · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the screen warning team. You did the right thing calling the number on the display — that message on your laptop is a serious one.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
Praising the person for calling makes them feel smart and safe, so they lower their guard before any request is made.
Real company: A real security company never puts a phone number in a warning pop-up, and never cold-calls about a message on your screen.

                Bernard
                Oh — right — well, I saw the big orange thing, yes. It's sitting there bold as brass. Funny though, I thought it said SafeBelt Plumbing when I first looked. Would you be the plumbing people?
              
                Caller
                No, no plumbing, SafeNet Billing, the warning is the thing. And I'd rather you didn't leave that orange message sitting there much longer — machines in that state can go downhill fast.
              
                  Urgency or fearFake pop-up with phone number
                
A vague threat of things getting worse pushes the person to act now instead of pausing to check.
Real company: A real company never warns you about a message on your own screen or rushes you to act on it.

                Bernard
                Downhill, you say. Hm. Before we get to that — are you warm enough where you're sitting? Only the back step here still wants painting and I've been putting it off since the spring.
              
                Caller
                I'm plenty comfortable, thank you. That step isn't going anywhere, but the warning on your machine needs attention now — it's flagged as infected and the clock's ticking on it.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Oh, the clock's ticking, is it. Reminds me — I watched a programme about lighthouses, oh, back in eighty-nine I think it was. All that ticking and tocking, very soothing. Are you sure you wouldn't like something warm?
              
                Caller
                SafeNet Billing doesn't do tea, I'm afraid. Look, that warning isn't going to sort itself out, so I need to get onto your machine and clear it from my end.
              
                  Remote access requestUrgency or fear
                
Offering to fix the problem yourself removes effort from the target and makes the stranger feel like a helper.
Real company: A real software company never asks to connect to your computer from an unexpected call. It points you to its official support page.

                Bernard
                From your end? How d'you mean? And it's Monday, isn't it — no, Tuesday. Tuesday, definitely. I keep getting that wrong.
              
                Caller
                It doesn't matter what day it is, sir. I'm from SafeNet Billing, the warning on your screen is the reason I'm ringing, and if you'd just let me have a look at the machine I can put it right.
              
                  Remote access requestFake scan or planted problemsUnsolicited contact
                
He offers to fix a problem you never reported, so relief at being helped replaces the question of how he knew.
Real company: A real billing company posts notices in your account and never asks to look at your machine.

                Bernard
                SafeNet — is that the one with the boats? No, sorry, I'm thinking of something else. Look, the back step wants painting before the wet comes, and I've been meaning to get to it all week. What was it you wanted again?
              
                Caller
                I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →