Call #323 · 2026-10-21

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

Nobody who can see your screen through the phone needs to, and no warning screen is cleared from the caller's end.

“The caller wanted to look through Bernard's line and Bernard offered to post the machine instead, which the caller could not accept.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

no line opened, the caller left his own call · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you've reached the number on the warning screen — so you're seeing it too, then? The full-screen one, red across the middle, saying your machine's infected.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
Confirming the screen makes the victim feel the danger is real and shared, so they trust the caller as the fix.
Real company: A real security company never puts a phone number on a warning screen and never calls you about it.

                Bernard
                Oh — well — now, I'm seeing something, yes, a great red thing across the middle, though I'd have called it SafeBelt, if you don't mind me saying. Tuesday, isn't it? No — Wednesday. The bin men came, so it must be Wednesday.
              
                Caller
                SafeBelt, SafeNet, close enough — the important thing is that warning isn't going to sit there politely, it spreads the longer it's left. I really wouldn't leave it running while you work out what day it is.
              
                  Urgency or fearFake pop-up with phone number
                
It creates a ticking clock so the person acts fast instead of pausing to check whether the warning is real.
Real company: A real security warning names the exact problem and tells you to run your own antivirus scan, not to hurry.

                Bernard
                Spreads, does it? Like damp, you mean. My neighbour had damp and it went right up the landing. Are you eating properly, by the way? You sound like a young man who's skipped his dinner.
              
                Caller
                I've eaten, thank you — look, damp's not far off, it creeps into everything on the machine and it won't announce itself. As the billing end of this, I can tell you the warning only lifts once someone clears it from our side.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                The billing end. Right. And are you warm enough where you are? My sister's boy works in an office and he says it's perishing. Hold on, hold on — the door's gone. Only the wind. You were saying about the machine.
              
                Caller
                Perishing's about right, these offices never get the heating sorted. But listen — to clear it I'd just need to look at the screen through your line, nothing for you to fiddle with, and we'll have it done.
              
                  Remote access request
                
Offering to do the work for you removes any sense of effort or risk, so agreeing feels like the easy, helpful choice.
Real company: A real support team never needs to view your screen from a cold call, and would book a proper appointment through official channels.

                Bernard
                Through my line, is that it? Well — now — my knees are in no state for fiddling. Would it be easier if you posted it? Or is that not how it's done these days. Hold on, was it Monday? I've lost track entirely.
              
                Caller
                Posted won't work, it has to be the line. And it's not Monday, it's — never mind that, the warning's still up, isn't it, so can we just get me looking at it before it gets any worse?
              
                  Remote access requestUrgency or fearFake pop-up with phone number
                
                Bernard
                Oh, I've got it as Tuesday, but I dare say you're right. Worse how, though? Worse than what? And would it mind being in a bungalow, this machine? My knees are the trouble, you see.
              
                Caller
                I'll get someone else to ring you. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →