Call #288 · 2026-10-21

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen is not a phone call. Real security staff do not ring you about a pop-up and ask to be let in.

“Bernard asked whether remote viewing worked over a bungalow, and the caller decided the streets could wait.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

no entry given, no screen seen, the line cleared itself · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, support line, how can I help? I believe there's a warning showing on your screen right now — that's why you've rung, isn't it?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It sounds like a real support desk answering a call you made, so the warning feels confirmed and official.
Real company: A real company does not call you about a pop-up, and its support number is on your bill or its own website.

                Bernard
                Oh — well — now. There is a great orange thing across the middle of it, yes. Sorry, what was the firm called again? Sate-Lamp, was it? I've got a cousin in insurance, you know, he'd have something to say about orange.
              
                Caller
                SafeNet Billing, that's right. Sir, that orange banner means your machine is compromised this very moment — every minute it sits there, more of your files go. Is it still on the screen?
              
                  Urgency or fearFake authority or brand impersonation
                
A countdown of loss makes people act before they think, so they skip checking who is really calling.
Real company: A real security firm never phones from a pop-up and never claims files are vanishing minute by minute.

                Bernard
                Compromised, you said. That's a big word for a Tuesday. Hold on, let me just — oh, I've found the thing I was hunting for, it was up on my head all along. Now then, what were we doing?
              
                Caller
                Sir, I'm from SafeNet Billing, we handle the security end of things, and I need you to stay with the warning screen and not touch anything else. The banner — is it still there?
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                It's still there, bold as brass. Do you take a cup of tea while we sort this out? I've got the pot on and it seems a shame to let it stew. Only, my niece says I shouldn't leave it steeping so long.
              
                Caller
                Billing can wait, sir, but the warning can't. I'm authorised on these security matters and I can sort it from my end — I just need to be able to see your screen from here.
              
                  Remote access requestUrgency or fearFake authority or brand impersonation
                
It pairs a claim of authority with a ticking clock, so the person focuses on the danger and not on who is really asking.
Real company: A real support team never asks to see your screen from an unexpected call, and will give you a number you can verify yourself.

                Bernard
                See my screen? From wherever you are? That's clever, that is. My cousin sold insurance from a desk and he never managed anything like that. Would it work over a bungalow, do you think — only I've only the one floor.
              
                Caller
                It works on any sort of building, sir — I've cleared whole streets from my desk here at SafeNet. I only need you to let me in at your end, and then we can get this sorted before it spreads.
              
                  Remote access requestUrgency or fearFake authority or brand impersonation
                
                Bernard
                Spreads to what, though? There's only me in the house and I've not noticed anything amiss. Hold on — the radio's gone quiet, and they were doing a play about a lighthouse keeper. I've missed the middle of it now.
              
                Caller
                I'll get someone else to ring you. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →