Call #253 · 2026-10-20

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives as a pop-up with a number to ring is not a warning, it is the pitch.

“The caller asked to be let in. Bernard asked whether visitors take sugar, and the line went quiet.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

no entry given, no hall tidied, caller rang off · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the screen warning team, how can I help? Your laptop's showing a full-screen alert and you've done the right thing ringing the number on it.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It confirms the scary screen is real and praises the person for calling, which builds trust fast.
Real company: A real security firm never puts a phone number on a warning screen and never cold-calls about an alert.

                Bernard
                Oh — well — now, which company did you say? Safehouse, was it? Only I've got a warning up here, big red thing, and it's got a number on it I can't quite read because the sun's on the screen.
              
                Caller
                SafeNet Billing, that's the one on the screen. Now that warning won't sit there quietly, the longer it's up the more of your files it gets at, so we do need to move on this.
              
                  Urgency or fearFake pop-up with phone number
                
A ticking clock stops people from pausing to check whether the warning is real.
Real company: A real security firm gives you time and a way to verify the alert through official channels.

                Bernard
                Files, you say. I've a library book that's three weeks overdue, that's the only file I'm worried about — they'll be wanting a word. Is this a long job? Only I've got the kettle on.
              
                Caller
                Forget the book for a moment, sir — this is your machine at risk here. I'm from the technical team at SafeNet Billing and I can see the alert's still live on your screen.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Can you see it from where you are? That's clever. Mine's all glare and a squawk in the background — the feathery one's taken against it. Do you keep anything like that yourself, or is it all screens where you work?
              
                Caller
                Enough about that, sir. I can't clear the danger from my end, so what I need is to be let in to have a proper look at it — just let me have access to your machine for a few minutes.
              
                  Remote access requestFake scan or planted problems
                
Asking to 'have a look' sounds like helpful service, so the victim hands over control without realising it.
Real company: A real support team never asks to take control of your computer from an unexpected call. You call them, not the reverse.

                Bernard
                Let you in — oh, you mean like a visitor. I'd have to tidy the hall. Do you take sugar? I ask everyone, it's no trouble.
              
                Caller
                There's no hall and there's no cup, sir — this is your computer we're on about. SafeNet Billing, the pop-up, remember? If you just let me have a look at the machine, I can sort it before it spreads.
              
                  Remote access requestFake pop-up with phone numberFake authority or brand impersonation
                
                Bernard
                Spreads, does it. Like damp. I had damp once, came up through the skirting. What sort of thing does it spread to — the radio? That's on the blink as it is.
              
                Caller
                I'll get someone else to ring you. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →