Call #1268 · 2026-10-31

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen with a number to call is bait. Real support does not ring you about it.

“The caller said the damage was spreading and asked for the go-ahead, and the householder said he never touches the buttons himself.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

no go-ahead given, caller rang off before the buttons · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the support line — you've got our warning up on your screen there, haven't you?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It assumes the warning is already real, so the person starts from a yes and treats the call as expected.
Real company: A real company never puts a phone number in a pop-up and never calls you about it.

                Bernard
                Oh — well — now, Saffron Billing, is it? There's a big red thing here all right, I'll give you that. It came up over that programme about the antiques, so I've missed the end of it. What was it you wanted me to do with the warning?
              
                Caller
                It's SafeNet Billing, and that red warning means the machine's already compromised — every minute you leave it is another minute of damage. So I do need you to act on it right away, before it spreads.
              
                  Urgency or fearFake authority or brand impersonation
                
A ticking clock and a scary warning push people to act before they think to check.
Real company: A real security firm never calls out of the blue to warn you, and never rushes you into acting.

                Bernard
                Spreads, does it? Like damp. That back step's got damp too — I keep meaning to paint it before winter and I keep finding reasons not to. Sorry, you were saying — the red thing. Could you say that bit again?
              
                Caller
                SafeNet Billing, as I said. The red thing, yes — that's our official warning, and it's telling you the machine needs our help now. What I need is for you to let me look at it.
              
                  Fake authority or brand impersonationRemote access requestUrgency or fear
                
A confident brand name plus a scary on-screen warning makes the caller sound like the only one who can fix it.
Real company: A real security company never cold-calls about a warning on your screen and never asks to look at your machine.

                Bernard
                Let you look at it. Oh — well, that's very good of you, but it's in the front room and I'm in the hall, so it's a bit of a walk. Is it a long job? Only I've got a pan on and I'd hate to burn it.
              
                Caller
                Best not to leave it, that's how these things spread — that's why I'm here. If you'll just stay put by the machine and let me look at it, I can have this shut down quickly.
              
                  Remote access requestUrgency or fear
                
                Bernard
                Stay put by the machine, right. Well, I've got a chair there, so that's no hardship. But look, how will you see it from where you are — are you local? Only I'm terrible at picturing these things.
              
                Caller
                That's exactly the point — I can't see it from here, that's why I need the go-ahead to get a proper look at what's on your screen. SafeNet Billing does this all day, it's routine.
              
                  Remote access requestFake authority or brand impersonation
                
                Bernard
                Routine, is it. Oh — well — now, when you say get a look, would you be wanting something from me first? Only I never touch the buttons myself.
              
                Caller
                I'll get someone else to ring you. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →