Call #278 · 2026-10-21

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen is not a phone call you owe, and nobody needs to be let into your machine to fix a fault.

“The caller asked to be let into the machine. Bernard asked whether that meant in the room too, and the caller hung up.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

no entry gained, no warning read out, the line dropped · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you've reached the number on the warning screen. Is this the householder? I need to talk to you about the infection flagged on your machine.
              
                  Fake pop-up with phone numberFake authority or brand impersonationUrgency or fear
                
A scary warning screen with a phone number feels official, so people call the number already believing something is wrong.
Real company: A real security company never puts a phone number on a warning screen and never calls you about an infection it found.

                Bernard
                Oh — well — now, is that SafeNest? My cousin Dennis sold insurance, so I've a soft spot for anything with a nest in it. What infection, dear? I've had a bit of a cough myself but it's mostly the damp.
              
                Caller
                SafeNet, yes, with a B. Not your cough, sir — the warning on your screen says it's spreading right now, and if it's left sitting there much longer the damage gets a lot harder to undo.
              
                  Urgency or fearFake scan or planted problemsFake authority or brand impersonation
                
It creates panic about a spreading threat so the person acts fast instead of checking.
Real company: A real security firm never cold-calls about a warning on your screen and never pressures you to act within minutes.

                Bernard
                Right, with a B, I'll remember that. Now you'll have to bear with me, I've misplaced my reading glasses and I can't find them anywhere. Oh — they're on my head. Happens every Tuesday.
              
                Caller
                Yes, so I'm told — now that you can see again, look at the warning and tell me what it's asking for, because the flag on your account says this machine needs releasing today.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Asking? Well, it's got a great big red box, and a number with far too many nines in it. Looks a bit like the jar label I made for my marmalade — same shade of orange, funnily enough.
              
                Caller
                The orange, right. The message under it warns that a fault on your line is blocking our fix, so I need to come through and put it right remotely — just let me into the machine and you can watch.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
Offering to let the person watch makes the request feel safe and transparent, lowering their guard before they hand over control.
Real company: A real support team never asks to take remote control from an unexpected call. They give you a number to call back and a reference.

                Bernard
                Come through, you mean like the man who reads the meter? He doesn't come til Thursday. And I'm not sure I follow — you'd be in my machine, but would you be in the room as well?
              
                Caller
                Not in the room, in the machine. But no one comes in through it until you're ready — just say the word and we'll start, before the warning scrolls to the part about permanent lockout.
              
                  Remote access requestUrgency or fear
                
                Bernard
                Lockout of the shed as well, would it be? Only my cousin Derek sold insurance, and he always said to sleep on that sort of thing.
              
                Caller
                Forget it. I'm putting the phone down now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →