Call #1143 · 2026-10-30

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives as a pop-up with a phone number is not a warning, it is an advert for a stranger to reach into your machine.

“The caller asked to reach into the machine, and the householder asked whether that was like the man who had to get in round the back.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearUnsolicited contactRemote access request

access queried twice, entry refused, caller posted the problem instead · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the pop-up support line — is that the warning on your screen in front of you now?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It treats a scary on-screen warning as real and confirms the number you dialled belongs to a trusted helper.
Real company: A real security firm never puts a phone number in a warning pop-up and never cold-calls about it.

                Bernard
                Oh — well, now, there's a great red thing across the whole of it, yes. I was in the middle of a play on the radio, you see, and it's gone and covered the lot. Safe... Safe something, you said? Say it again, my left ear's a bit unreliable.
              
                Caller
                SafeNet Billing, yes. And sir, that red warning means the infection is spreading while we talk, so we do need to deal with it before the machine gives out entirely.
              
                  Urgency or fearFake pop-up with phone number
                
A countdown to disaster shuts down careful thinking, so people act fast to stop a threat that is not real.
Real company: A real security firm never phones from a pop-up and never claims a warning is spreading. It waits for you to contact it.

                Bernard
                Safebet Billing, right, I've got that now. Infection, you said — is that the sort of thing that wants airing out? Only my wireless in the front room goes funny when it's damp.
              
                Caller
                No airing, sir — SafeNet Billing handles this kind of thing, and I can see the fault logged on your line right now. Can I have your name so I can pull the case up properly?
              
                  Fake authority or brand impersonationUnsolicited contact
                
A confident company name and a claim to already see the problem make the caller sound official and informed.
Real company: A real billing team writes to you through the contact details on your account and never cold-calls about a fault.

                Bernard
                Pottle. Bernard Pottle. And what's your name, while we're at it? You've got a lovely clear voice — are you warm enough where you're sitting? It's turned bitter out.
              
                Caller
                I'm in the support room, it's fine. Mr Pottle, if I can just have a look at the machine for you — not the radio, your screen — then this will be sorted before it gets worse.
              
                  Remote access requestUrgency or fear
                
Asking to look at the screen sounds like helpful service, and the hint of things getting worse pushes him to agree quickly.
Real company: A real support team never asks to view your screen from an unexpected call. You call them, through a number you look up yourself.

                Bernard
                Well, that's very good of you. Only I'm not sure what you'd be looking at, it's mostly the play I was telling you about. Would you like me to hold the phone up to it so you can hear?
              
                Caller
                Not the sound, sir. If you'd just let me have a look at the machine — a bit of access to it from my end — the fault clears itself in minutes.
              
                  Remote access request
                
                Bernard
                From your end, you mean? Oh — well — now, that's the second time you've said access. Would that be like the man from the water board? Because he had to get in round the back.
              
                Caller
                I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →