Call #1103 · 2026-10-30

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen is not a person. No real support line needs to get inside your computer to fix it.

“Nothing was installed, nothing was paid, and the call went nowhere.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsUnsolicited contactRemote access request

access never given, caller aged out of the script · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing support, you've reached the right place. You're seeing our warning on the screen, aren't you — the full red one, with the number on it?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
Confirming the screen matches what the caller describes makes the warning feel real and makes the caller seem to already know the situation.
Real company: A real company never relies on a pop-up number, and it contacts you through channels you can verify yourself.

                Bernard
                Oh, the red one, yes, that's on there. Well — now — hold on, was it SafeNet or Safebed? I've got my glasses somewhere. It's very red, I'll say that for it.
              
                Caller
                SafeNet, SafeNet Billing, it's on the screen in front of you. That red warning means the machine is already compromised — we need to deal with it while the connection's still live.
              
                  Urgency or fearFake authority or brand impersonationFake scan or planted problems
                
A scary warning plus a ticking clock pushes people to act before they stop to check whether any of it is real.
Real company: A real security firm never calls about a warning on your screen. You would contact them through a number you looked up yourself.

                Bernard
                Compromised, right. Well, it's just sitting there being red, it's not doing anything. I've got the kettle on, actually — do you take yours with a bit of sugar?
              
                Caller
                SafeNet, Bernard, and this is our technical division — I'm the one authorised to handle the warning on that screen. So if you could give me your attention for a moment.
              
                  Fake authority or brand impersonationUnsolicited contact
                
A calm, official-sounding title makes the caller seem like the proper person to trust with the warning.
Real company: A real security firm does not cold-call about a warning on your screen, and you can verify any claim by calling the number on their official site.

                Bernard
                It's SafeNet, is it? Or Safebed, I had a mattress once — no, forgive me. The red thing's just sat there, it's not doing any harm. What did you want me to look at?
              
                Caller
                The warning itself, that's what I need you looking at — I can see the state of the machine from my end. It's not something that sits quietly, and the fix starts with me getting onto the machine directly to have a look.
              
                  Remote access requestFake scan or planted problems
                
He claims to see a hidden problem on the machine, so the fix sounds like it must happen through him.
Real company: A real software company never asks to connect to your computer after a pop-up. It points you to its official support page.

                Bernard
                Getting on it — is that like having a look through the window? Only I've got a jigsaw out on the table and there's a bit gone missing since Easter, so it's a bit of a state in here.
              
                Caller
                Not through the window, no — I need to be in it, on it, so I can see what the warning's already done inside. You let me onto the machine and this is a couple of minutes.
              
                  Remote access requestFake scan or planted problems
                
                Bernard
                You're very keen to get in, aren't you. Look, I don't think I'm the man for this — I'm seventy-six, or seventy-seven, I'd have to check. What was it you said the red thing was called again?
              
                Caller
                Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →