Call #48 · 2026-10-18

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen is not a phone number to call, and no real support desk needs to look inside your machine over the line.

“The caller asked to look inside a stranger's laptop over the telephone and was offered tea and a budgie instead.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

nothing gained, kettle interrupted · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, support desk, good afternoon. You rang the number on the warning on your screen, is that right?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
Confirming the victim made the call makes them feel they started it, so the caller seems like a legitimate responder rather than an intruder.
Real company: A real company does not put a phone number in a browser warning, and it does not treat a cold call as a verified support case.

                Bernard
                Oh — hello! Yes, well, I pressed the number on the telly-screen thing. SafeNest, did you say? Like the birds' nests in the hedge. Mavis would have something to say about that. Are you eating properly, dear? It's nearly teatime.
              
                Caller
                SafeNet, not nests — and that warning means your machine's in a bad way right now, so we really don't have long. Every minute it sits there it's spreading.
              
                  Urgency or fearFake scan or planted problems
                
A ticking clock shuts down careful thinking, so people act fast to stop a threat they were just told exists.
Real company: A real security firm never cold-calls about a warning on your screen, and never rushes you into a decision.

                Bernard
                Spreading? Oh dear. Like the ivy behind the shed — took me three weekends, that. Hold on, there's the kettle going. Won't be a tick.
              
                Caller
                No, please don't put the kettle on, sir, this is urgent — spreading means the infection's moving through your files while we talk. Can you just confirm you're the account holder for that laptop?
              
                  Fake authority or brand impersonationUrgency or fear
                
A calm, official-sounding voice claiming to be a security team makes the threat feel real and immediate.
Real company: A real security team never cold-calls about infections and would let you verify them through official channels first.

                Bernard
                Well, it's my grandson's old one, so I suppose I'm holding it. Oh — speaking of, my cousin Dennis once sold insurance, and he said never sign anything urgent. Was it insurance you said?
              
                Caller
                Not insurance, SafeNet Billing — and I'll be quick, just to confirm, the warning on your screen belongs to that machine, yes? Now, if you'd just let me have a look at it, I can clear this off before it gets any worse.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
Asking to look at the machine feels like help, while the warning and the hurry push Bernard to agree before he thinks.
Real company: A real software or billing company never asks to connect to your computer from a pop-up, and would tell you to close it and call the number on your bill.

                Bernard
                Have a look? Well, you're very welcome to pop round, but it's a fair drive. Is it far to you? Mind, the budgie next door's learned my telephone voice, so don't be alarmed if there's whistling.
              
                Caller
                No, no — not pop round, I mean let me look at it remotely, over the line, that's the whole point. I just need you to let me in to the machine so I can see the warning for myself.
              
                  Remote access requestFake scan or planted problems
                
Offering to fix the problem yourself feels helpful, and letting someone in feels like the fastest way to make the scary warning stop.
Real company: A real software company never asks to connect into your computer from an unexpected call, and would point you to support you contact yourself.

                Bernard
                Over the line? The telephone doesn't go into the laptop, does it? Mavis sits on it and I don't think she'd take to wires. Wait now — what was the name of your firm again? Safety something.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →