Call #1148 · 2026-10-30

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives on your screen with a number to ring is bait, and no real support takes a look at your machine from their end.

“The caller offered to look at the machine from their end, and the householder asked whether they would be warm enough there.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

screen stayed dark, account unconfirmed, caller rang off · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the screen warning team. You've got a warning sitting on your screen right now, haven't you?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It assumes the warning is real and gets the person to confirm it, so the fake screen becomes the shared starting point.
Real company: A real security firm never phones you off a pop-up. You would look up their number yourself and call them.

                Bernard
                Oh — well — now, is that the yellow one? There's a yellow thing been sat there since Tuesday, bold as brass. Only I thought it was the weather page. SafeNet, did you say? My cousin Cyril was in insurance, you know.
              
                Caller
                The yellow one, yes, that's the one — and it's been sat there since Tuesday, so whatever's on your machine has had four days to spread. That's the bit I'd want to sort before it goes any further.
              
                  Urgency or fearFake scan or planted problems
                
It turns a harmless pop-up into a spreading infection with a ticking clock, so the person acts fast instead of checking.
Real company: A real security team never diagnoses your machine from a pop-up, and never pressures you to act within minutes.

                Bernard
                Four days, is it? My word. Only I'm not sure where the thing's got to — is it a small one, would it fit on the mantelpiece? Cyril always said a thing left alone sorts itself out.
              
                Caller
                It's on your screen, not on the mantelpiece, and this isn't something that sorts itself out. I'm the billing side of the warning, so the first thing is getting your account confirmed before it spreads.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Confirmed, right you are. Now — is that the account for the electric, or the water? Only I pay the water with the little card, and the shop's shut of an evening.
              
                Caller
                Neither — it's not the electric and it's not the water, it's the account attached to the warning. Look, I don't need a card or a shop; I need you to let me have a look at the machine from my end so I can see what's on it.
              
                  Remote access requestFake scan or planted problems
                
Offering to look inside the machine feels like help, and it puts the caller in control of the device.
Real company: A real support team never asks to connect to your computer from a cold call. You call them on a number you look up yourself.

                Bernard
                From your end? Oh, that's clever. A cousin of mine sold insurance and he could never do that — he had to come round and put his cup down. Would you be warm enough where you are, doing it from your end?
              
                Caller
                Warm enough, yes, thank you. Right — if you'd just let me have a look at the machine from my end, I can see exactly what's got on it and we can be done. Can we do that bit now?
              
                  Remote access requestFake scan or planted problems
                
                Bernard
                We can do that bit — only the machine's gone dark on me and there's a funny thing on the top that keeps saying the number. Does it want feeding, do you think, or is that just a thing it does?
              
                Caller
                I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →