Call #98 · 2026-10-19

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A red warning on your screen is not a phone call, and no real company needs remote access to fix it.

“The caller offered tea and a biscuit. The script offered a look at the machine. Neither was taken up.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

script exhausted, no access, kettle still on · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, good afternoon — you're through to the team about the warning on your screen, yes? I'll be quick, I just need a moment of your time.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller confirms the scary warning is real and offers fast help, so the target feels relief and stops questioning.
Real company: A real company never calls you because of a pop-up, and never treats a screen warning as a real account problem.

                Bernard
                Oh — well — now, is that Sailboat Billing? Only the screen's been saying all sorts, and I don't know what to make of it. Very red. Are you warm enough where you are? It's turned quite chilly here.
              
                Caller
                SafeNet Billing, that's right, and yes I'm quite warm, thank you. Look, that red warning isn't just a message — the longer it sits there the more damage it's doing, so we really ought to sort it now.
              
                  Urgency or fearFake pop-up with phone numberFake authority or brand impersonation
                
A ticking clock makes people act before they think, and the warning on screen feels like proof the danger is real.
Real company: A real security firm never phones from a pop-up and never claims a message is causing ongoing damage.

                Bernard
                Sailboat, yes, that's what I said. Now — damage, you said? Only Mavis is in the front room and she does shout, so I don't know if it's her or the machine. Is it the sort of thing that needs feeding?
              
                Caller
                That's the line, isn't it — we hear it all day, and it's an official alert from our network team. So if you'd just let me look at the machine, we'll have this cleared up in no time.
              
                  Fake authority or brand impersonationRemote access request
                
Claiming an official alert from a network team makes the problem sound verified and above question.
Real company: A real support team gives you a reference number and asks you to call the number on your bill or their website.

                Bernard
                Let you look at it — well, that's very good of you, only I'd have to find my glasses, and the kettle's just going. You wouldn't know about that cousin of mine who sold insurance, would you? He'd have had a view on this.
              
                Caller
                No, I don't know the cousin, but he'd tell you not to leave a warning like that sitting, I'm sure. It really is safest if I just take a look at it myself — quicker for both of us.
              
                  Remote access requestUrgency or fear
                
Offering to handle the problem personally feels helpful and saves effort, so the target relaxes and hands over control.
Real company: A real support team never asks to take over your device from an unexpected call, and would point you to official contact channels.

                Bernard
                Hang on a moment. Right — where was I. Oh yes, you want a look. Only there's a budgie next door that's learned the telephone, so if it starts up, that's not me. Would you have a biscuit while we're at it?
              
                Caller
                That's kind, but I don't think a biscuit's going to sort the warning, is it. Just let me have a look at the laptop — that's all I'm asking, and then I'll leave you to your tea.
              
                  Remote access requestFake scan or planted problems
                
It brushes off the friendly offer and reframes access to the device as a small, reasonable favour, so the ask feels minor.
Real company: A real support team never asks to look at your device from an unexpected call, and would point you to official contact details instead.

                Bernard
                Leave me to my tea — nobody's ever said that to me before. Now, when you say have a look, would you be looking from there, or would you need to come round? Because the front step is a bit steep.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →