Call #303 · 2026-10-21

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A pop-up that tells you to phone a number is not a warning, and no real support line needs to look through your screen to fix it.

“Nothing was installed, nothing was paid, and the call went nowhere.”

Fake pop-up with phone numberUrgency or fearFake authority or brand impersonationUnsolicited contactRemote access requestFake scan or planted problems

no remote look granted, caller hung up on his own offer · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing support, you've done the right thing ringing the number on the screen. That warning you're looking at, it's a bad one — I need to walk you through it before it spreads.
              
                  Fake pop-up with phone numberUrgency or fearFake authority or brand impersonation
                
Praising the person for calling the number on screen makes them feel they acted correctly, so they trust the voice that answers.
Real company: A real security firm never puts a phone number in a warning pop-up and never asks you to call it.

                Bernard
                Oh — well — now. Before it spreads where? Is it the sort of thing that gets into the soft furnishings? Only I've just done a jar of marmalade, my own, and I'd hate anything to get at it. What was the name of your firm again?
              
                Caller
                It doesn't go near your preserves, sir, it's all inside the machine. SafeNet Billing — and the longer that warning sits there the worse it gets, so can we deal with it now?
              
                  Urgency or fearFake pop-up with phone number
                
                Bernard
                SafeBelt Billing, right you are. Well, that's a relief about the preserves. Now, this machine — is it the big grey one with the screen, or the little one that does the radio? I get them mixed up. Mind you, my eyes aren't what they were.
              
                Caller
                SafeNet. Billing. And it's whichever one was showing the warning on its screen, the big grey one most likely. Look, this won't take long if we get started.
              
                  Fake authority or brand impersonationUnsolicited contact
                
A confident brand name and a claim to already know the problem makes the call feel official and routine.
Real company: A real security company does not cold-call about a warning on your screen, and would give a name, a reference and a way to verify it.

                Bernard
                Oh, the big one, that'll be the one by the window. I don't suppose you know if it wants feeding? Only my last gadget came to a sticky end. Here — are you warm enough where you are? You sound like you've been sat at that desk a while.
              
                Caller
                That's kind of you, but it's not about me — that machine doesn't need feeding, it needs looking at. If I could just get onto it with you, I can see exactly what's what and clear it off.
              
                  Remote access requestFake scan or planted problems
                
Offering to fix a problem he has only hinted at makes the victim feel helped rather than robbed.
Real company: A real support team never takes remote control from an unsolicited call, and asks you to contact them through official channels.

                Bernard
                Get onto it — I see. Like onto the roof, you mean, but without a ladder. Well. Now then, I'd have to move a pile of papers off it first, they've been there since the spring. Would it wait a minute while I fetch my specs?
              
                Caller
                No ladder, no papers, none of that — I just need you to let me have a look at it from here, that's all. It really can't wait much longer, the warning's getting worse by the minute.
              
                  Remote access requestUrgency or fear
                
                Bernard
                Worse by the minute, is it. Hm. It's been saying that since Tuesday, so it's a patient sort of warning really. Now — hold on — is that the kettle? I'll not be a tick.
              
                Caller
                I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →