Call #38 · 2026-10-18

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

No real support desk calls you about a pop-up and asks to be let into your machine from their end.

“The caller offered a cup of tea and the kettle clicked off before any access was granted.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestUnsolicited contact

remote access refused, kettle attended · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, support, hello — you're calling about the warning on your screen, is that right? I'll be quick, just need to confirm what it's showing.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It assumes the warning is real and that you already believe it, so you skip the question of whether it was ever genuine.
Real company: A real security firm never relies on a pop-up phone number, and would expect you to reach them through their official site.

                Bernard
                Oh — well — now, is that SafeBelt Billing? Because the screen's gone a funny blue since I put my glasses down somewhere. You've got a lovely clear voice, by the way. Are you eating properly?
              
                Caller
                SafeNet, yes, SafeNet Billing. Never mind the blue, that's exactly the kind of thing it does before it goes, and it goes quickly. Are you in front of the screen now?
              
                  Urgency or fearFake pop-up with phone number
                
A vague threat of something failing fast pushes the person to act before they can think or check.
Real company: A real security company explains the problem in writing and never rushes you off the phone to your screen.

                Bernard
                SafeBelt, that's it. I'm near the screen but not in front of it, as such — the budgie next door has learned our telephone voice, would you believe, so I'm keeping an ear on that. Does it need feeding, this business on the screen?
              
                Caller
                I'm authorised support for SafeNet Billing, so please just take me at my word on this — it's not pets, it's the machine, and it needs seeing to today. Now, is the warning still up?
              
                  Fake authority or brand impersonationUrgency or fear
                
Claiming official authority and asking to be trusted without proof stops the listener from checking anything.
Real company: A real support team gives a reference number and a number you can call back on the official website.

                Bernard
                Oh, it's still up, still up. It's been up since half past — no, sorry, since about ten, because I'd had my tea. My cousin sold insurance, you know, door to door, and he always said never rush a thing. Would you like a cup while we sort it?
              
                Caller
                That's kind, but no. If you'd just let me have a look at it from here — just remote access, I mean — I can take the warning off myself and you can put your feet up.
              
                  Remote access requestUnsolicited contact
                
Offering to do the work for you feels helpful, and letting someone else handle a scary warning is tempting.
Real company: A real software company never asks to connect to your device from an unexpected call. You contact them first.

                Bernard
                Let me have a look at it from here — how do you mean, from where you are? Oh, hold on, the kettle's just clicked off. Won't be a moment.
              
                Caller
                From my end, through your line — I just need you to let me in on the machine, that's all. Sir? Are you still there with the screen?
              
                  Remote access requestFake pop-up with phone number
                
Asking to be let in sounds like a small favour, so the target focuses on being helpful rather than on what access really means.
Real company: A real support team never asks to connect into your computer from an unexpected call. You call them, through the number on your bill or their official site.

                Bernard
                Back now, sorry. So you'd come in through the phone line, would you? The chap who did our gutters came in through the garden, much simpler. Could you not do that?

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →