Call #1243 · 2026-10-31

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen with a phone number on it is bait, and the number printed there is not a support line.

“The agent offered to look at the machine from his end, and the householder offered directions from the pub.”

Fake pop-up with phone numberUrgency or fearFake authority or brand impersonationFake scan or planted problemsRemote access request

warning unread, glasses found, nobody visited · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing support, you've reached the number on your screen — that warning isn't going to clear itself, sir, so let's get you sorted before it spreads.
              
                  Fake pop-up with phone numberUrgency or fearFake authority or brand impersonation
                
The caller ties himself to the warning already on the screen, so the victim believes the number came from a trusted source.
Real company: A real security company never puts a phone number in a pop-up and never calls you about a warning on your screen.

                Bernard
                Oh — well — now, that's a relief, someone answering. Spreading, you say? Reminds me of the damp in the back bedroom, took me all of one summer to get on top of it. Is it catching, like? Only I've a photograph somewhere I'd like you to see.
              
                Caller
                No, sir, it's not like damp — it's already working through your files while we talk, and every minute counts. The photograph can wait; this really can't.
              
                  Urgency or fearFake scan or planted problems
                
A ticking clock shuts down thinking, so the target acts before checking anything.
Real company: A real support team gives you time and a written record, and never claims a problem is spreading as you speak.

                Bernard
                Safeways Billing, is it? I'll remember that. Well, it's just this picture I've got — I want a second opinion on it and you're the first person I've had on the line all week.
              
                Caller
                SafeNet, sir, SafeNet Billing — as printed on the warning across your screen, the one with our number on it. I'm from their support team, and I do need you to focus on the machine, not the picture.
              
                  Fake authority or brand impersonationFake pop-up with phone number
                
                Bernard
                There it is again, your number. The thing is, my eyes aren't what they were and the print's ever so small on there. Hold on, I'll fetch my glasses — they're in the hall, back in a tick.
              
                Caller
                No need to fetch anything, sir — I can read the number to you myself, it's right here in front of me. What I actually need is your help getting connected to that laptop, if you'd just let me have a look at it.
              
                  Remote access requestFake pop-up with phone number
                
Offering to read the number himself removes the step where Bernard might check it against the real screen, and the request to 'have a look' sounds like routine help.
Real company: A real software company never asks to connect to your computer from an unexpected call. You contact them through their official support page.

                Bernard
                Oh, you're very good, reading it out — but my glasses have turned up, they were in my cardigan the whole while. You were saying about having a look. A look at what, sorry? The light in here's dreadful.
              
                Caller
                At the machine, sir — the one showing our warning. If you'd just allow me a look at it from my end, I can clear the whole thing off before it does any damage.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
                Bernard
                Well, you're very welcome to come and have a look, but the bus out here only runs on Tuesdays. Unless you're local? Do you know the Fox and Hounds? I'm just past there.
              
                Caller
                Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →