Call #1008 · 2026-10-29

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen is not an emergency, and a stranger who says he can fix it from his end is not a helper.

“The caller offered to come in and wipe his feet, and the line went quiet before the offer could be taken up.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

threat announced, access asked, glasses found, nobody in · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the team who handles the alerts. I'm looking at the warning that's showing on your screen right now, so let's get that cleared up.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller claims to already see the warning on your screen, which makes the alert feel real and the call feel expected.
Real company: A real security company does not call you about a pop-up. You would look up their number yourself and call them.

                Bernard
                Oh — well, now, that's very good of you. Only I can't see it at the moment, the screen's gone a bit dark, it does that if I don't touch it for a while. Is it a colour thing, this warning? My cousin Dennis sold insurance and he always said red sells.
              
                Caller
                It's not about the colour, sir, it's the alert itself — and every minute you leave it sitting there it digs itself in deeper. So I'd rather we moved on it now than later.
              
                  Urgency or fear
                
A ticking clock makes people act before they think, so they skip checking whether the warning is real.
Real company: A real security team states the facts calmly and gives you time to verify the alert through official channels.

                Bernard
                Deeper into what, though? Sorry, you'll have to bear with me, my left ear's not what it was. It's a Bitwave thing, is it, this billing? Dennis used to do house policies, not computers.
              
                Caller
                SafeNet Billing, not Bitwave, and it's not a policy either — it's the security alert sitting on your machine. I'm from the team that deals with this, and I can only help while the window's still open.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Oh, the window. Sorry, I thought you meant — well, never mind. Mavis is watching me through hers, the parrot, she's in the back room. Anyway. You were saying about this team of yours.
              
                Caller
                SafeNet Billing — I can clear this off your machine from my end, and I only need your say-so to come in and look.
              
                  Remote access requestFake authority or brand impersonation
                
Asking permission sounds polite and helpful, so the victim feels in control while handing over access.
Real company: A real billing team never connects into your computer. They send a written bill and a phone number you can look up yourself.

                Bernard
                My say-so, right. Well, come in if you must, but you'll want to wipe your feet, the garden's a state. Sorry — did you want to drive over, is that it? Or is it one of those over-the-phone jobs?
              
                Caller
                Over the phone, sir — no driving needed. It just means letting me look at your screen from my end, so I can see exactly what the infection's done before it spreads.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
Offering to look at the screen feels like help, and the talk of spreading infection pushes him to act fast.
Real company: A real software company never asks to view your screen from a cold call, and would point you to its official support page.

                Bernard
                Spreads to where, though? There's only the one machine and the wireless does what it likes. You'd think being this far out we'd not get the internet at all, but Bert next door says — oh, hold on, that's my glasses, not the phone. Carry on.
              
                Caller
                I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →