Call #3 · 2026-10-18

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen is not proof of a problem, and no real support line needs to look at your machine from where they are.

“The caller offered a look at the machine from there and was told it was in the back room, next to the ironing.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

no access, one shovel of coal · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, good afternoon — you're through to the support line. Am I right in thinking you've got a warning up on your screen?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller confirms a scary warning the person is already staring at, so the call feels like a response to a real problem.
Real company: A real security company never puts a phone number in a warning pop-up, and never calls you about it.

                Bernard
                Oh — well — now, is that Safeway Billing? Only I've got a warning on the laptop, big red thing, and I can't get the telly on either, though that might be the aerial. Is it Thursday today? I've been telling Mavis it's Thursday.
              
                Caller
                Thursday, yes, that's right. But forget the telly and listen — that warning means your machine is at risk this very minute. Every second you leave it, the danger goes up.
              
                  Urgency or fearFake pop-up with phone number
                
A ticking clock shuts down careful thinking, so people act fast to stop a threat that is not real.
Real company: A real security team never phones from a pop-up and never claims danger grows by the second.

                Bernard
                Well, that's a worry. Though I did think it was Wednesday, and the coal man comes Wednesday. Hold on — the fire's getting low, I'll just give it a shovel. Won't be a tick.
              
                Caller
                No, no, don't go — please, this really can't wait. SafeNet Billing has flagged your line and the warning won't clear on its own, I promise you that.
              
                  Fake authority or brand impersonationUrgency or fear
                
A made-up authority plus a ticking clock makes people obey before they stop to check who is really calling.
Real company: A real billing company writes to you and never needs you to stay on a call to clear a warning.

                Bernard
                You're very good to ring, you are. Are you warm enough where you are? Only it's turned bitter here. And Mavis keeps squawking whenever I pick the phone up — she's got opinions, that bird.
              
                Caller
                That's kind of you, but there's no heating in this office, funnily enough. Listen — if you'd just let me have a look at the machine from here, I can clear the warning for you and be quick about it.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
Offering to fix the problem remotely feels helpful and fast, so the target hands over control without pausing to check.
Real company: A real support team never takes remote control of your device from an unexpected call, and will tell you how to reach them yourself.

                Bernard
                Let you have a look? Oh, it's in the back room, the laptop, next to the ironing. It'd be a faff to fetch it. Would it not be easier if I just switched the thing off and on again? That's what I usually do with the telly.
              
                Caller
                No, don't switch it — it's not like the telly, it's a live infection. SafeNet Billing just needs a little look from here, nothing you'd even notice.
              
                  Remote access requestFake authority or brand impersonationUrgency or fear
                
It frames a stranger's access to the computer as routine and harmless, while pressure to stay on the line blocks a second opinion.
Real company: A real company never needs remote control of your computer from an unsolicited call, and would happily let you call back on a number you look up yourself.

                Bernard
                Well, I don't like to think of an infection spreading about. Does it want feeding, this infection, do you know? Mavis had a mite once and the chap at the shop gave us a spray.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →