Call #328 · 2026-10-21

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that tells you to call a number and let someone look at your machine is not a warning, it is the pitch.

“The caller wanted a look at the machine tonight and Bernard asked whether the warning came in any colour but red.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

warning unfed, no look taken, caller rang off · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the screen warning team. I understand there's a message up on your laptop telling you to ring us?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
A number shown on screen feels official, so people ring it believing they reached the company that warned them.
Real company: A real security firm never puts a phone number in a warning and waits for you to call it.

                Bernard
                Oh — well — now, is that what it says? I thought it was one of those adverts for a cruise. There's a big red box on it, and a little picture of a padlock, and I did wonder whether it needed feeding.
              
                Caller
                Right, that red box is the infection warning, and it isn't going to sit there politely — it spreads if it's left. That's why you've got to act on it this evening, not tomorrow.
              
                  Urgency or fearFake pop-up with phone number
                
A ticking clock shuts down careful thinking, so the target acts before checking anything.
Real company: A real security team tells you what happened in writing and never rushes you into a same-evening decision.

                Bernard
                Spreads, does it? Like the moss on the back wall. My late wife used to say that about the moss — leave it and it'll be in the front room by Sunday. Is there a colour it comes in? Only I'm not fond of red.
              
                Caller
                SafeNet Billing doesn't sign off on colour preferences, that's not a thing. Focus on the red box — this is a genuine system alert from our side and it needs clearing tonight.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                SafeNet, you said. Safeway, I've got written down here. Now then — do you take sugar? Only I've a pan on and it seems a shame to drink alone.
              
                Caller
                It's SafeNet Billing, and I'd rather you didn't wander off to the kitchen with the warning sitting there. I'm authorised to handle this, but only if you let me look at the machine with you.
              
                  Remote access requestFake authority or brand impersonationUrgency or fear
                
It pairs a friendly tone with a claim of authority, so agreeing to let them look feels like cooperating with help rather than surrendering control.
Real company: A real software or billing company never needs to look at your machine to clear a warning, and would point you to its official support page.

                Bernard
                Look at it with you — how's that work, then? You're not in the front room, are you? Mind, my neighbour's lad does the computers, he's got a jigsaw going on the dining table, one piece missing since Easter and it's driving him batty.
              
                Caller
                That's the bit I keep trying to get to — I'd need to look at it through your machine, so let me just have a look. It's authorised and it's the only way the warning gets cleared tonight.
              
                  Remote access requestUrgency or fearFake authority or brand impersonation
                
                Bernard
                Through the machine. Hm. Well, the telly does that, doesn't it — the man from the shop looked at our old set through the phone once and it still went green. D'you reckon it'd go green?
              
                Caller
                I'll ring you back another day. Bye now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →