Call #383 · 2026-10-22

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives on your own screen and hands you a number to call is not a warning, it is an advertisement.

“Bernard offered the caller a cup of something, and the caller decided the shift was over.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

screen unread, machine untouched, technician clocked off · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                That's my line you've reached, the one printed on the warning on your screen. What's it actually showing you?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller ties himself to the scary warning on the screen, so the number feels like proof he is official.
Real company: A real security team never prints a phone number in a warning and waits for you to call it.

                Bernard
                Oh — well — now, it's showing a big red thing, quite a lot of red, and there's a sort of shield on it. Very colourful. It's got your SafeNest name on it, I think. Are you all warm enough where you're sitting?
              
                Caller
                It's SafeNet, with an N, and that red thing is not there to be admired. That warning means the trouble is happening right now — every minute you leave it, the worse it gets.
              
                  Urgency or fearFake authority or brand impersonation
                
A ticking clock shuts down thinking, so the target acts on the warning instead of checking it.
Real company: A real security firm gives you time to verify the alert through official channels and never rushes you.

                Bernard
                Right, SafeNest, that's what I said. Every minute, you say. Well, I was just looking at the garden — the fuschias have come on lovely this year, I don't know if you grow anything. Do you lot have a garden there?
              
                Caller
                I'm not here to chat about gardens, Bernard, I'm a certified technician with SafeNet and I'm on the clock. That red screen is an official alert and it needs sorting before the damage spreads.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Certified, are you? That's grand. Now — hold on a moment, there's someone at the door — no, it's the phone, isn't it. Sorry. My left ear's a bit off, so say that again about the spread?
              
                Caller
                Never mind the door, look at the screen — the alert is spreading through your machine as we speak. I need to look at it with you, so if you just let me into the machine I can see the damage for myself.
              
                  Remote access requestUrgency or fearFake scan or planted problems
                
It pairs a scary claim of spreading damage with a request for access, so panic pushes the person to hand over control before thinking.
Real company: A real support team never asks to take over your machine from an unexpected call, and would point you to official contact details you look up yourself.

                Bernard
                Let me just get my specs. Oh — now — into the machine, you say. Does that need a wire, or does it go through the air like the radio? Because I had a devil of a job with the radio on Sunday, all that crackling.
              
                Caller
                It's not the radio, it's the machine in front of you and it's not crackling, it's faltering. If you'd let me have a look at it I could tell you straight — that's all I'm asking.
              
                  Remote access requestFake scan or planted problems
                
                Bernard
                Faltering, is it. Well, it does that. Do you know, I've got a nephew who does something with these — Trevor, he's called — he had a go at it in the spring and I've not dared touch it since. Would you want a cup of something while I dig out his number?
              
                Caller
                Forget it. I'm putting the phone down now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →