Call #1013 · 2026-10-29

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen is not a phone call, and a real company will not ring you about it to ask for codes.

“The warning was said to sit under their name, and Bernard said the library had told him not to read such things out.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

code withheld, programme saved, caller quit first · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the support line for the warning on your screen. Before we go any further, can you confirm you're seeing the big red message on the laptop in front of you?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It treats a scary screen as already proven and asks the person to confirm it, so they accept the premise instead of questioning it.
Real company: A real security company never puts a phone number in a warning and never calls you about it. You would look up support yourself.

                Bernard
                Oh, hello! SafeBelt Billing, is it? Now then, the little screen's gone all red, yes — very red, I'll say that for it. Hold on, my hearing aid's doing that whistle again when I cup my ear. Can you hear it?
              
                Caller
                SafeNet Billing, yes. Look, that warning means your machine is flagging something right now, so we do need to deal with it promptly rather than let it sit. Can you read me the line at the top of the red box?
              
                  Urgency or fearFake pop-up with phone number
                
A countdown of danger stops the person from pausing to check whether the warning is even real.
Real company: A real security firm never phones from a pop-up, and would let you verify the alert through your own account at your own pace.

                Bernard
                The top line? Oh — well, it's in ever such large letters. Let me get my glasses, they're on the arm of the chair. Are you warm enough where you are, by the way? It's gone quite cold here.
              
                Caller
                I'm the billing side of SafeNet, so that warning sits under our name — that's how you know it's a proper notice and not one of the fake ones. Just the top line, when you've got your glasses.
              
                  Fake authority or brand impersonationFake pop-up with phone number
                
                Bernard
                Billing side, right you are. The top line says — oh, hang on, the cat from next door is on the windowsill staring in at me, bold as brass. Give me a tick. Sorry, where were we? The plate number, was it?
              
                Caller
                Not a plate, no — the machine's own code, the one printed in that red box. Once I have it I can see straight off whether this is the serious one or not.
              
                  Remote access requestFake scan or planted problems
                
Asking for a code from the screen feels like a small, technical step, so the target hands over access without sensing risk.
Real company: A real support team never asks you to read out a code that lets them into your machine, and never diagnoses a fault from a pop-up.

                Bernard
                Oh, the machine's own code. No, I couldn't read you that, they told me at the library never to read things like that out. But look, is this going to take long? Only I've got a programme halfway through on the radio and it's nearly the good bit.
              
                Caller
                It's the machine telling us it's compromised, so we're on the clock — just the code from that box and the programme can carry on.
              
                  Remote access requestUrgency or fearFake scan or planted problems
                
                Bernard
                The box, was it? Oh — I'd have to fetch my specs for that and they're upstairs somewhere. Is it urgent, or could it wait until after the wireless?
              
                Caller
                Forget it. I'm putting the phone down now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →