Call #1003 · 2026-10-28

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

No real company will ask for a way into your machine to fix a warning you cannot read back to them.

“The line asked for a way in, and the caller asked whether he should come round the front or through the side.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

warning unread, way in refused, caller signed off first · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you've reached the number on the warning. That screen in front of you, the big red one — can you read me what it says at the top?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller treats the alarming screen as real and asks you to read it, so you accept the warning and the phone number as genuine.
Real company: A real security company never puts a phone number on a warning screen and never calls you to talk you through it.

                Bernard
                Oh — well — now, which screen would that be? I've got the little one in the kitchen that does the weather. Is it a red warning or more of a brownish one? I ask because my reading glasses have gone missing again.
              
                Caller
                It's the laptop screen, sir, the big one, and the red banner means the machine is already compromised. Every minute it sits there, the worse it gets — so the top line, if you can manage it.
              
                  Urgency or fearFake scan or planted problems
                
A countdown makes people act before they think, so they skip checking whether the warning is real.
Real company: A real security warning names the exact problem and tells you to contact support through official channels you look up yourself.

                Bernard
                Compromised, you say. Hmm. Wait — they're on my head, aren't they. The glasses. Oh, that's the second time this week. Now, does this banner say anything about a library book? Because I owe them three weeks and I'd hate to miss a notice.
              
                Caller
                No, sir, nothing about books — this is SafeNet Billing, and that warning means your machine is actively reporting out. I need you to look at the top of that red screen and tell me what it says.
              
                  Fake authority or brand impersonationFake pop-up with phone numberUrgency or fear
                
                Bernard
                SafeNet, right you are. Or was it SafeNest? I've got a sparrow's nest in the gutter, funnily enough, been meaning to see to it. Anyway — I'm looking at the machine but it's just showing me a photograph of my late sister's garden. Lovely hydrangeas.
              
                Caller
                SafeNet Billing, sir, not the nest, and I can't see your photographs from here. If that red page is behind them, close it off and have a look — I can't do anything until you read me the top line.
              
                  Remote access requestFake pop-up with phone numberUrgency or fear
                
It frames the caller as unable to help until Bernard reads out a code, which feels like a small, harmless step toward fixing a scary problem.
Real company: A real billing team never needs you to read codes off a warning page. They contact you through your account or statement.

                Bernard
                Oh, behind it, is it. Give me a moment, my knees are not what they were. — There. Now it's asking me to ring a number with rather a lot of nines in it. Should I do that, or is this the number?
              
                Caller
                That's the one, sir — that number rings straight through to SafeNet Billing, and you've reached us. Now, while I have you, the fastest fix is to let me take a look at the machine directly, so if you can just give me a way in, we'll sort it.
              
                  Remote access requestFake pop-up with phone numberFake authority or brand impersonation
                
                Bernard
                A way in. Right. Well, you'd want to knock loud — my left ear's a bit off. Do you mean round the front, or is there a way through the side?
              
                Caller
                I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous