Call #1288 · 2026-11-01

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A pop-up with a phone number is bait, and a real support line will never ring you first about a warning on your screen.

“The caller said the infection would only get worse, and the householder asked whether it came in a colour.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access requestUnsolicited contact

warning stayed put, engineer signed off, no access given · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Good afternoon, SafeNet Billing support here — you're through about the warning on your screen, yes?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It assumes you already saw the warning, so you feel you made the call and skip checking whether the number is real.
Real company: A real security firm never puts a phone number in a pop-up and never calls you about one.

                Bernard
                Oh — hello there. Now, is that SafeNest? My niece had a nest of something in her loft, but that's by the by. The screen's got a big red thing on it, very red, quite cheerful really. What was it you wanted?
              
                Caller
                It's SafeNet, and that red thing is anything but cheerful — it means your machine's already affected, and every minute it sits there the worse it gets. So we really do need to sort it now, while we still can.
              
                  Urgency or fearFake authority or brand impersonation
                
A countdown makes people act before they think, and a confident brand name makes the warning feel official.
Real company: A real security firm never cold-calls about an on-screen alert, and it gives you time to verify through official channels.

                Bernard
                Affected by what, though? Only it says something about a virus, but my neighbour's lad reckons those are mostly for show. Oh — hold on, I've lost my glasses. They'll be somewhere daft. You don't happen to need feeding, do you? Only I've a pot on.
              
                Caller
                No, thank you, no feeding needed — I'm … no. Your neighbour's lad isn't sitting looking at that red screen, is he? I'm the licensed engineer handling this, and I can tell you it's a real infection on your machine.
              
                  Fake authority or brand impersonationFake scan or planted problemsUrgency or fear
                
Claiming to be a licensed engineer makes Bernard feel an expert has confirmed a real problem, so he stops questioning the red screen.
Real company: A real support team never cold-calls about a warning on your screen, and never claims to be an engineer already handling it.

                Bernard
                That's a comfort, that is. Licensed and everything. And where do you sit, then — is it a big office, or are you at home like me? Only the back step wants painting before the cold gets in.
              
                Caller
                Listen — the office can wait, and so can the step. This only works if I can get onto your machine from here and have a proper look at what's infected; that's how we clear it.
              
                  Remote access requestUrgency or fear
                
Offering to fix the problem yourself feels helpful, and framing access as the only cure makes refusal seem reckless.
Real company: A real support team never connects into your computer from an unexpected call. You call them using the number on your bill.

                Bernard
                Onto my machine? Oh — well — now. You'd be very welcome, but I haven't the foggiest how you'd get in. There's the porch door but that's stiff. Are you far away?
              
                Caller
                I'm nowhere near your porch, and that's the thing — with the line open I just need you to let me look at the machine from here, and then the warning's gone and nothing's ruined.
              
                  Remote access requestUrgency or fearUnsolicited contact
                
It offers to fix the problem instantly from a distance, so relief feels one small permission away.
Real company: A real software or security company never asks to connect into your computer after a surprise call or pop-up.

                Bernard
                You know, I've just realised I'm looking for my glasses. Oh — they're up here, on my head, all along. Well, I never. Now, this warning, does it say what colour it comes in?
              
                Caller
                I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →