Call #243 · 2026-10-20

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that tells you to phone a number is bait. Real warnings never ask you to call and let a stranger look at your machine.

“The caller offered a look down the line. Bernard asked whether he was just up the road and could pop in.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

desk unreached, visit declined, caller rang off · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Thanks for picking up — that warning on your screen, that's from us. I'm with SafeNet Billing, and we need to sort it before it spreads.
              
                  Fake pop-up with phone numberFake authority or brand impersonationUrgency or fear
                
The caller claims ownership of a scary warning already on the screen, so the fear feels confirmed by a real person.
Real company: A real security company never phones you about a pop-up, and never asks you to call a number shown on one.

                Bernard
                SafeNet Billing, is it? Right you are. Only there's a great red thing across the whole screen, can't miss it — hold on, my slipper's gone under the chair, the left one. Give me a moment, I'm not as bendy as I was.
              
                Caller
                Never mind the slipper for a moment — that red warning is the thing to worry about. It means something's in your machine right now, and the longer it sits the worse it gets.
              
                  Urgency or fearFake scan or planted problems
                
It turns a harmless pop-up into a ticking threat, so fear crowds out the obvious question of how a stranger could see inside the machine.
Real company: A real security company never cold-calls about a warning on your screen, and it never asks you to act on a pop-up.

                Bernard
                Oh, in the machine, is it. Well — that's a worry. Does it want feeding, this thing? Only I forget to eat myself some days, so I'd be no good at remembering.
              
                Caller
                No feeding, no — but it does spread on its own, so we'd rather not give it the time. That's why the warning carries our number, so the right people catch it early.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Spreads by itself, does it? Like the ivy out the back, that stuff goes everywhere. Am I all right sat here, or should I move along?
              
                Caller
                You're fine where you are, it's not that sort of thing. Look, this is the part that matters — if you let me have a quick look at the machine, I can tell you straight away whether it's serious.
              
                  Remote access requestFake scan or planted problems
                
Offering to check the machine himself feels helpful and low effort, so the target hands over control without thinking.
Real company: A real support team never asks to connect to your computer from an unexpected call. You call them, not the reverse.

                Bernard
                Have a look, you say. Well — where are you, exactly? You sound very close, so I wondered if you were just up the road. Only you could pop in.
              
                Caller
                Not up the road, no, I'm at the SafeNet Billing support desk. I don't need to come round — it's all done down the line these days, you see.
              
                  Remote access requestFake authority or brand impersonation
                
                Bernard
                Down the line. That's clever, that is. It's just — I don't really know what's on the machine. My nephew set it up, and he's not been round since.
              
                Caller
                Forget it. I'm putting the phone down now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →