Call #293 · 2026-10-21

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that appears on your screen cannot phone you, and a real firm will not need to come in down the line to fix it.

“Nothing was installed, nothing was paid, and the call went nowhere.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

no way in found, caller hung up first · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing here, you're through to the support line — that warning on your screen, that's us flagging it, so you're in the right place.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller confirms the scary warning came from a real company, so the victim believes the phone number was the correct place to call.
Real company: A real security company never puts a phone number in a warning pop-up and never calls you about it.

                Bernard
                Oh, well, now, that's a relief. I'm looking at it — big red thing, takes up the whole picture. Hold on, is that SafeNest? My nephew's with a firm called something like that. What does yours do exactly?
              
                Caller
                SafeNet Billing, yes — and I really do need you to focus, because that red screen means something's got into the machine and it won't sit there politely. Bernard, is it still up on the display?
              
                  Urgency or fearFake authority or brand impersonationFake pop-up with phone number
                
It pairs a scary claim with a demand to hurry, so the person reacts to the alarm instead of checking it.
Real company: A real software or billing company never phones about a red screen and never rushes you to act.

                Bernard
                Still there, yes. Though I did wonder if it was the weather doing it — the signal plays up something dreadful when it rains. Now what was it you wanted me to do about the red? I've a jar of marmalade on the go, so I can't be long.
              
                Caller
                Weather doesn't put red warnings on a laptop. Look, that red is our alert and it's there because the machine's compromised, so I need to get into it and clear it before it spreads. Can you let me have a look at it?
              
                  Fake authority or brand impersonationRemote access request
                
Claiming the scary warning is a genuine company alert makes the fix sound official and urgent.
Real company: A real security team never cold-calls about a pop-up and asks to look inside your machine.

                Bernard
                Let you look at it? You're not in the room though, are you. How would that work — do you come round? I'd put the good biscuits out, I'm not a heathen. What is it you'd actually be looking for?
              
                Caller
                No, not round — I'd come to it down the line, the usual way. You just need to let me in at your end, and then I can see the red and sort it out. Can you do that for me?
              
                  Remote access requestFake scan or planted problems
                
Asking to be let in sounds like a small favour, so the victim grants access without realising it hands over the whole machine.
Real company: A real support team never asks to connect into your device from an unexpected call. You call them, through a number you looked up yourself.

                Bernard
                Down the line, right. Now — I had a man come to the door once about the gutters and he was ever so good, but he never came back. Is this like that? Let me just move this jar off the table, it's sticking.
              
                Caller
                No, this isn't gutters. It's the warning on your machine and it's still sitting there — you said so yourself. Whatever's in it needs clearing and I can't do that from here unless you let me through.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
                Bernard
                Well, the thing is I wouldn't really know where to start with letting you through. I can never find anything in it as it is.
              
                Caller
                I'll ring you back another day. Bye now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →