Call #73 · 2026-10-18

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

No real security team will ask to get onto your machine to clear a warning, so a pop-up with a phone number is the scam itself.

“The caller asked for remote access to a laptop. Bernard offered a lighthouse programme and a grey lead instead.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

nothing gained, kettle still warm · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, good afternoon. You've reached us about the warning on your screen, haven't you? I'll be quick — I just need to confirm what it's showing you.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It assumes the call is expected, so the person feels they made contact and drops their guard.
Real company: A real company does not cold-call about a warning on your screen, and it never treats a pop-up as proof of a problem.

                Bernard
                Oh — well, now — it says "SafeBelt Billing" on the top, in a blue bar. Blue, that's a nice choice, isn't it? My slippers are blue. Well, one of them is, the other's gone under the chair. Would you give me a moment?
              
                Caller
                SafeNet Billing, sir, not SafeBelt — and there's no time for that, the warning means your machine is at risk right this second. I'll be quick, just tell me what the screen says.
              
                  Urgency or fearFake authority or brand impersonation
                
A ticking clock stops people from pausing to check whether the warning is real.
Real company: A real security firm never cold-calls about a warning on your screen and never rushes you.

                Bernard
                At risk? Oh dear. Mavis, did you hear that. She's a parrot, you know — she doesn't answer, mind. The screen's got a lot of red on it. I don't much care for red. What does the blue bar say again?
              
                Caller
                The blue bar says SafeNet Billing, and we're the certified security team for your machine — that warning came straight from us. So I just need you to read it out to me, quickly now.
              
                  Fake authority or brand impersonationUrgency or fear
                
A confident brand name plus a claim of official authority makes the warning feel verified and real.
Real company: A real security team never phones from a pop-up and never asks you to read a warning aloud.

                Bernard
                Certified — well, that's grand. Are you warm enough where you're sitting? It's turned chilly. I had the kettle on, actually, before you rang. You don't sound like you've had your tea.
              
                Caller
                That's kind of you, sir, but I've had my tea and I'm quite warm — it's the red warning we need to sort. Shall we just have you let me have a quick look at the machine, so I can clear it for you?
              
                  Remote access requestUrgency or fearFake scan or planted problems
                
He brushes off small talk and steers straight back to the warning, so the fear stays hot and the offer to look feels like help.
Real company: A real support team never asks to take control of your computer from an unexpected call. They tell you to contact them through official channels.

                Bernard
                A quick look, right. Oh — hold on. My slipper's gone right under the chair, I can see the toe of it. One moment, don't go anywhere. There, got it. Now — a look at what, sorry?
              
                Caller
                At the machine, sir — I just need to get onto your laptop and see what that red warning's done. If you let me have access, I'll be in and out in no time.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
Offering to fix a scary warning makes handing over control feel like the helpful next step.
Real company: A real software or security company never asks to take remote control of your laptop after a surprise warning.

                Bernard
                Access to the laptop. Hmm. I had a programme on lighthouses once, in eighty-seven — did you ever see that? The fella climbed right up the outside. Marvellous. Anyway — is it the little grey lead you'd be wanting, or the other one?

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →