Call #318 · 2026-10-21

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen is not a company reaching you, and nobody genuine needs you to stay on the line to fix it.

“The caller offered to walk Bernard into the machine, and Bernard asked where exactly, as he does not often go anywhere without knowing.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

no reference read, no walk taken, the line closed on itself · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing here, you're through to the support line — that warning on your screen is ours. Can you read me the reference number shown on it?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller claims the alarming pop-up is official, so the target trusts the warning and the number they rang.
Real company: A real security firm never puts a phone number in a pop-up and never asks you to read a code off your screen.

                Bernard
                Oh, hello there. Sorry, I had the radio on rather loud — was it SafeBelt you said? Now, the screen's gone all blue and shouty, but I can't say I've spotted a reference anywhere. Would you like a cup of tea while we look? The back step wants painting before winter, you see, so I'm up and down.
              
                Caller
                SafeNet Billing. And never mind the step — that warning means your machine is locked down as we speak, so we do need to move on this today. Have another look, it'll be a row of letters and numbers somewhere on the blue.
              
                  Urgency or fearFake pop-up with phone number
                
A sudden claim of being locked down makes people act fast before they think to check.
Real company: A real security firm never phones from a pop-up and never rushes you to act today.

                Bernard
                Oh dear, under the crossword, that's where they always end up. Letters and numbers in the corner — I'll have a squint in a moment, soon as the radio finishes this bit. Locked down, is it? It doesn't look locked to me, it's just very insistent.
              
                Caller
                It's the parts you can't see that are the problem, that's the thing. I'm the only one who can lift it off your machine, so let's have those letters and then I'll get straight on it.
              
                  Fake authority or brand impersonationUrgency or fearRemote access request
                
Claiming to be the only person who can fix it makes the target feel dependent and afraid to hang up.
Real company: A real support team never claims to be your only option, and never asks for remote access from an unexpected call.

                Bernard
                Well, that's very good of you. Oh — hold on, there's a knock I ought to answer. The letters, now. Would they be near the top of the shouting, or the bottom? I've got my specs somewhere but they're not on my face, that's the trouble.
              
                Caller
                Top or bottom, it doesn't fuss me — whichever your eye lands on first. And while you're up, are you sitting at that machine? I can walk you into it, but only from here, mind.
              
                  Remote access requestFake pop-up with phone number
                
                Bernard
                Sitting at it, yes, in the good chair. Only I've just remembered I've a pan on and the gas doesn't like being left. You said you can walk me — walk me where, exactly? I don't often go anywhere without knowing.
              
                Caller
                Into the machine, that's all — nothing that takes you off the chair. But we're losing the run of it here and the warning's still sitting there shouting its head off. Read the row to me, there's a good man.
              
                  Remote access requestUrgency or fear
                
                Bernard
                In a moment, in a moment — the pan first. Oh, and did you say the machine, or the warning? Because the warning's not on the machine, it's on the little screen, and that's a different thing entirely.
              
                Caller
                Honestly, I don't know why I bother. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →