Call #1263 · 2026-10-31

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A red warning on your screen is not a summons, and no technician needs remote access to fix one.

“The technician asked for a look at the machine, and the householder asked whether he was warm enough where he was sitting.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestUnsolicited contact

access never reached, warning still red, caller hung up on himself · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the support line — you're calling about the warning on your screen, is that right?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It confirms a scary warning the person just saw, so the call feels like a natural next step rather than a stranger reaching out.
Real company: A real security firm never puts a phone number in a pop-up and waits for you to call it.

                Bernard
                Oh — well — now, is that SafeBelt? The screen's got a big red thing on it, very red, and I can't make head nor tail of it. Hang on though, I've lost a slipper somewhere under the chair, so you'll have to bear with me.
              
                Caller
                It's SafeNet Billing, yes. Never mind the slipper for now — that red warning means the machine is badly compromised and it needs sorting out before it gets any worse.
              
                  Urgency or fearFake authority or brand impersonation
                
A scary warning plus a clock makes people act before they stop to check whether the warning is real.
Real company: A real security firm never phones from a pop-up. It shows alerts inside its own app and lets you contact it through official channels.

                Bernard
                Compromised, is it? That sounds rather rude. There's a programme on the radio about otters I'm half listening to, but go on — what does the red thing want me to do?
              
                Caller
                SafeNet Billing doesn't put red warnings on screens for fun, sir — it's a serious infection and it'll spread. Look, I'm the certified technician assigned to your case, so you're in the right hands.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Certified technician, is it? Very good. And what's the— oh, sorry, that's the radio again, they're on about the shipping forecast now. Are you warm enough where you're sitting?
              
                Caller
                That's kind of you, I'm fine. Right — the fix is simple if you just let me have a look at your machine from here; that's all I need, a bit of access so I can see what's going on.
              
                  Remote access requestUnsolicited contact
                
Offering to look at the machine feels helpful and technical, so the target hands over control without realising what it allows.
Real company: A real support team never takes remote control from an unexpected call. They give you a number to call back on the official website.

                Bernard
                A look from there — that's clever, that is. Though the machine's over by the window and I've not quite got my breath back from the stairs. Would you give me a minute?
              
                Caller
                Take your time, sir — but the infection doesn't wait about, so the sooner you're at the machine and I've got access, the sooner it's off your screen.
              
                  Remote access requestUrgency or fear
                
                Bernard
                I shall get to it directly. Oh — but I've just remembered, my right foot's gone cold, I've lost one of the soft things that goes under the chair. Not the machine, the other thing. What was it you wanted again?
              
                Caller
                Honestly, I don't know why I bother. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →