Call #78 · 2026-10-18

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A pop-up with a phone number is bait. Real support never calls to offer remote access to your screen.

“The warning stayed up, the tool was never let in, and the kettle went on.”

Fake pop-up with phone numberUrgency or fearFake authority or brand impersonationRemote access requestFake scan or planted problems

remote access requested, kettle boiled instead · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, good morning — I'm told you've got the warning up on your screen, is that right? I'll be quick, we just need to get that cleared before it does any damage.
              
                  Fake pop-up with phone numberUrgency or fearFake authority or brand impersonation
                
It treats the scary pop-up as already confirmed and adds a ticking clock, so the person focuses on stopping harm rather than checking who is calling.
Real company: A real software or billing company does not cold-call about a warning on your screen, and it never asks you to act before you have verified the contact yourself.

                Bernard
                Oh — SafeNet, you said? My cousin was in insurance, you know, years back. Never could get him on the phone either. But yes, there's a warning on the little screen, big red thing. Mavis is staring at it, she doesn't like red.
              
                Caller
                That's the one — and you don't want to leave it sitting there, sir, these things spread while they're up. Is it still showing the number, the one you rang?
              
                  Urgency or fearFake pop-up with phone number
                
A ticking clock stops people from pausing to check, so they act on the caller's word instead of thinking it through.
Real company: A real security team tells you to close the window and contact them through a number you look up yourself.

                Bernard
                Oh — well — the number, yes, there's numbers all over it, more nines than a clock shop. Hold on, my glasses are somewhere. Are you warm enough there, wherever you're sat? It's turned chilly, hasn't it.
              
                Caller
                I'm quite warm, thank you, very kind. But just to confirm, sir, this is SafeNet Billing — I'm the engineer assigned to your case, so if you could keep your eyes on that warning for me.
              
                  Fake authority or brand impersonationFake pop-up with phone number
                
A calm, friendly manner and an official-sounding job title make the caller feel like a real support person handling a known problem.
Real company: A real security company does not call you about a warning on your screen, and never asks you to stay watching it.

                Bernard
                SafeNet, yes. Well — that's funny, I had it as SafeBelt all along, but I'll take your word for it. Now what is it you'd like me to do with the warning? Only I don't want to touch it in case it's like the smoke alarm.
              
                Caller
                Nothing to touch on the warning itself, don't worry — I just need to have a look at your machine from my end. If you let me have access to it, I can clear the whole thing from here in a few minutes.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
Offering to fix the problem they invented makes the caller seem helpful, so the victim hands over control to end the worry.
Real company: A real security team never asks for remote control from an unsolicited call, and would tell you to contact them through official channels.

                Bernard
                From your end? Oh, that's clever. Like the man who reads the meter in the cupboard. Sorry — have access how, exactly? You'll have to say that bit again, my left ear's gone a bit shy today.
              
                Caller
                I'll be quick — it just means letting my tool look through your screen for a moment, that's all. It's a very standard little thing, I'd rather not get into the how of it over the phone.
              
                  Remote access requestFake scan or planted problems
                
Asking to view your screen hands over control, and brushing off the details stops you asking what the tool actually does.
Real company: A real support team explains each step in plain words and never needs to watch your screen to fix a problem.

                Bernard
                Right, right. Well — hold on. Mavis. Mavis. Sorry, the parrot. Now, my cousin — Elsie's boy, sold insurance — sounds like that, "the how of it," and it never was a short conversation. Do you take sugar? I'm putting the kettle on anyway.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →