Call #1118 · 2026-10-30

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives on your own screen, with a number to ring, is bait from someone who wants control of your machine.

“The urgency was spent on a request for reading specs and a question about the weather at the other end.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

alert announced, urgency spent, caller rang off first · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Good afternoon, SafeNet Billing support here — you're through to the team about the warning on your screen. That full-screen alert isn't a mistake, so let's start with what it says across the top.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller treats the alarming screen as real and asks Bernard to read it, so he accepts the warning and the caller's role without question.
Real company: A real security company does not phone people who saw a pop-up. You contact them through the number on their own website.

                Bernard
                Oh — well — now, SafeNet, you said? Right. The screen's gone all blue and shouty, and there's a big number on it. Only I've left my reading glasses in the back room, and there's a coal fire down to its last embers.
              
                Caller
                The number's the important part, but the glasses can wait — that alert means your files are being taken as we speak, and I need you looking at it before there's nothing left to look at. Can you read anything off it at all?
              
                  Urgency or fearFake pop-up with phone number
                
A ticking clock and a threat of total loss push people to act before they think or check.
Real company: A real security team gives you time, explains the issue in writing, and never rushes you off a phone call.

                Bernard
                Taken where? Nobody's taken anything of mine since the coal man. Hold on, I'll give the fire a shovel — there's a draught in this chimney like you wouldn't believe. Are you warm enough where you are?
              
                Caller
                Warm as anything here, thank you. But it's not about being warm, sir — that message is serious and it's on your machine right now, and I'd rather we caught it in the next minute or two than later.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                A minute or two, is it? Well, the minute it takes me to find those specs is a minute it'll have to wait. Is that a Scottish accent I'm hearing? My wife's cousin was from up that way — or was it the other side.
              
                Caller
                Scottish-ish, aye, the line does that. Listen — forget the specs and the relative, I just need you to sit down in front of that screen and tell me what's showing, because this could be your last chance with it.
              
                  Remote access requestUrgency or fear
                
It rushes the person past their doubts and frames the next step as a final chance, so they act before thinking.
Real company: A real support team never pressures you to hurry and never asks you to sit at the screen while they direct you.

                Bernard
                Last chance with it — you make it sound like the dog. All right, I'm parked in the chair now. There's a big blue box, and a number, and a little figure waving a spanner about. Do you know, it's quite cheerful, considering.
              
                Caller
                Cheerful's the disguise, they do that. That waving figure's from one of the big firms, part of the warning — which is why it's got a number on it, the one you'd ring if you couldn't get through to me.
              
                  Remote access requestFake pop-up with phone numberFake authority or brand impersonation
                
                Bernard
                Big firm, is it. Mavis! Mavis, come and look at this, there's a waving man on the screen. She's not bothered. Now, which number was it you wanted me to ring, if I couldn't get through to you?
              
                Caller
                Forget it. I'm putting the phone down now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →