Call #1093 · 2026-10-29

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that comes with a phone number to call is the trap itself, not a rescue.

“The line wanted to look at the machine from its end, and the offer died on a stuck tin lid.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestSupervisor hand-off

remote access withheld, colleague promised, line ended · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you've reached the number that came up on your screen. That full-screen warning your machine's showing, that's what I'm calling about.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller ties himself to the alarming screen already on the machine, so he seems like the answer to a problem rather than its source.
Real company: A real security company does not call the number on a warning screen, and real warnings tell you to open the app yourself.

                Bernard
                Oh — well — now, is that the same warning that's been sat there since Tuesday? Only I thought it was a screensaver, you see. It's got a lovely moving pattern on it. What's that you said the company was called again — Salford Billing, was it?
              
                Caller
                SafeNet Billing. And it isn't a screensaver, sir, it's an active infection notice — it's been sitting there since Tuesday, which frankly makes it worse, not better.
              
                  Urgency or fearFake authority or brand impersonation
                
It reframes a harmless pop-up as a live threat with a timeline, so the listener feels the danger is already underway.
Real company: A real security firm never phones about a pop-up and never claims it has been watching your screen for days.

                Bernard
                Salford Billing, right you are. Very good of you to ring, that is. Now, would you like a cup of something while we talk? And I've got one of those tins with the lid on too tight — I'll want a hand with that directly.
              
                Caller
                I'm on the phone, sir, I can't reach through it for the tin. It's SafeNet Billing — we only handle the warning on your screen, and that notice means your machine's compromised right now.
              
                  Fake authority or brand impersonationUrgency or fearFake pop-up with phone number
                
                Bernard
                Compromised, is it? That doesn't sound at all well. Does it need feeding, or do you just switch it off at the wall? Only my grandson said something like that once, though I can't think what year he said it.
              
                Caller
                Don't switch it off — that'd wipe the evidence, and then there's nothing I can do for you. What I need is for you to let me have a look at the machine from my end, just while we're talking, and I can clear this off it.
              
                  Remote access requestUrgency or fear
                
It frames switching off as destroying proof, so the person feels they must keep the machine on and hand it over to avoid blame.
Real company: A real support team never asks to control your computer from a cold call, and would tell you to hang up and call the number on your bill.

                Bernard
                Let you have a look, you say. Oh — now, hang on. There's a brown envelope from the council I meant to open, and I've a feeling that's more pressing. What was it you wanted to look at, the machine? Which one — the one with the pattern?
              
                Caller
                The one right in front of you, showing my company's warning across it. I can't do anything more from here — I'll pass you to a colleague.
              
                  Remote access requestSupervisor hand-offFake pop-up with phone number
                
Handing off to a colleague feels like real support and lowers your guard just before the next person asks for access.
Real company: A real support team never needs to see your screen, and they would give you a case number and a number you can call back.

                Bernard
                Pass me over, then, that's quite all right. Mind you, will your colleague want a biscuit? Because I've got this tin and the lid's fair stuck on it.
              
                Caller
                I'll get someone else to ring you. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →