Call #68 · 2026-10-18

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen with a phone number on it is bait, so nobody legitimate needs remote access to fix it.

“The warning was urgent, the glasses were missing, and the computer stayed where it was.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

no access, no glasses, one parrot unbothered · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Good afternoon, SafeNet Billing support here — I understand you've got the warning on your screen in front of you, is that right?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller names a problem already on the screen, so the warning feels confirmed by an outside expert.
Real company: A real security firm never phones you from a pop-up. You call the number printed on your own software or bank card.

                Bernard
                Oh — SafeBelt, is it? Well now. Yes, there's a great red thing on the screen, very red. My cousin Dennis sold insurance, you know. He'd have had something to say about a warning that red. What does it want from me, exactly?
              
                Caller
                SafeNet Billing, yes. And that red is the important bit, sir — it means the infection's active right now and it's spreading the longer we leave it, so we really shouldn't dawdle.
              
                  Urgency or fearFake authority or brand impersonation
                
A ticking clock shuts down careful thinking, so the target acts fast to stop a threat that is not real.
Real company: A real security team states the facts plainly and gives you time to verify through official channels before anything is changed.

                Bernard
                Active, is it. Well I'm not sure I believe in all that, but the red does look smart, I'll give it that. Does it come with a little noise? Only Mavis is sensitive to noises, she's my parrot.
              
                Caller
                No noise, sir, it's the official SafeNet Billing alert — that's the company's own seal on your screen, so you know it's genuine. And I do need you to look at the number it's showing and give me a moment of your time.
              
                  Fake authority or brand impersonationFake pop-up with phone number
                
A logo or seal feels like proof, so people trust the screen instead of checking the source.
Real company: A real company never uses a pop-up seal as proof of identity, and never asks you to call a number on your screen.

                Bernard
                The number on the screen, you say. Hang on, I'll fetch my glasses — they're in the kitchen somewhere. Oh, and my cousin Dennis, he never wore his, drove everyone mad. You eating properly, by the way? You sound like a young man who skips lunch.
              
                Caller
                That's very kind, sir, but lunch isn't the priority here — the warning is. While you're up, could you let me have a quick look at the machine from my end? I'll be quick, just need you to let me in.
              
                  Remote access requestUrgency or fear
                
It reframes a request for control of the computer as a small favour, while pushing the warning to the front so the person feels they must act now.
Real company: A real support team never asks to be let into your computer from an unexpected call. They give you a number to call back and a case reference.

                Bernard
                Let you in? Well the front door's open but that's the garden, not the computer. Hold on, there's a budgie next door that's learned the phone — I'm sure I heard it just now. Terrible mimic, that bird. What was it you wanted again?
              
                Caller
                Not the front door, sir — into the computer itself, remotely, so I can look at the warning for you. If you just fetch your glasses and let me have that access, I'll be quick.
              
                  Remote access requestUrgency or fear
                
Asking for remote access while sounding helpful and hurried makes handing over control feel like a small favour, not a big risk.
Real company: A real software or security company never asks to control your computer from an unsolicited call, and would point you to its official support channels.

                Bernard
                Remotely, is it. Oh — well — now that takes my mind to Dennis again, he sold insurance from a little office, never left his chair. Those glasses though. If I open the drawer I'll find the kettle, I expect. You're sure I can't put one on for you?

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →