Call #1068 · 2026-10-29

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen is not a call, and a real help desk does not ring you first about a fault you never reported.

“The line offered a small piece of software to look at the notice from its end, and the bungalow kept its front room to itself.”

Fake pop-up with phone numberUrgency or fearFake authority or brand impersonationRemote access requestFake scan or planted problemsUnsolicited contact

remote access sought, software unnamed, caller stayed put · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, support line, good afternoon. You've got that warning up on your screen right now, haven't you — the red one telling you the machine's infected?
              
                  Fake pop-up with phone numberUrgency or fearFake authority or brand impersonation
                
It assumes the warning is already on screen, so agreeing feels like confirming a fact rather than being tricked.
Real company: A real security firm never cold-calls about a pop-up, and real warnings tell you to close the window, not phone a number.

                Bernard
                Red, is it? Oh — well — now, I've got my reading glasses somewhere, they're never where I leave them. Is it a bright red or more of a rusty sort? Only my cousin sold insurance and he always said red means urgent, though he also sold me a shed.
              
                Caller
                Rusty or bright, it doesn't much matter — it's the one saying your machine's infected, and that means whatever's on it needs looking at before it spreads. Could you read me what it's telling you?
              
                  Urgency or fearFake pop-up with phone number
                
                Bernard
                Oh, I'd have to get up close for that, the print's awful small. Hold on — is this the library ringing about my book? Because that's three weeks overdue and I'll not hear the end of it. No? Well, tell me again what it says.
              
                Caller
                No, sir, not the library — this is the SafeNet Billing support line. I'm looking at your account on my side, and the warning's flagged it as compromised, so I'd rather we dealt with it now.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                SafeNet, you said? My nephew's with a firm sounds like that, does heating. I'm not sure about compromised, but go on, tell me again while I find my glasses.
              
                Caller
                SafeNet Billing here, sir — your account's flagged and I'd like to deal with it before it gets away from us. If you'll let me have a look at that machine from my end, I can clear the notice off it.
              
                  Remote access requestUrgency or fearFake authority or brand impersonation
                
Offering to fix the problem personally creates trust and makes the victim feel helped rather than pressured.
Real company: A real company never asks to connect to your computer from a cold call. It writes to you and gives you time to verify.

                Bernard
                Have a look from your end? Oh — no, it's a bungalow, and the machine sits in the front room where I can see it fine from here. Hang on, the back step wants painting before winter and I keep forgetting. Now, what was it you were going to do?
              
                Caller
                I don't need to come to the bungalow, sir — I mean letting me in at your end, so I can see what the notice is doing. There's a small piece of software that does it, and I'd talk you through.
              
                  Remote access requestFake scan or planted problemsUnsolicited contact
                
Offering to fix the problem from inside your own computer feels helpful and saves you the trouble of a visit.
Real company: A real support team never asks to connect into your machine from an unexpected call. You call them, on a number you looked up yourself.

                Bernard
                I see, I see. Well, my cousin Clifford sold insurance, and he always said never sign anything on a Tuesday. Is today Tuesday? The radio's on but I don't take it in.
              
                Caller
                Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →