Call #1333 · 2026-11-01

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives with a number to ring is the number's own advertisement, not a diagnosis of your machine.

“The caller offered a look at the machine from his end and the householder offered to check the doormat instead.”

Fake pop-up with phone numberUrgency or fearFake authority or brand impersonationRemote access requestFake scan or planted problemsUnsolicited contact

no connection made, no click granted, caller rang off · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing here, you've reached the number on your screen. That warning is about your laptop, and I need to walk you through it before it gets any worse.
              
                  Fake pop-up with phone numberUrgency or fearFake authority or brand impersonation
                
The caller claims to be the number on the screen, so the warning feels confirmed and the threat feels real.
Real company: A real security company never asks you to call a number in a pop-up, and never phones you about a warning on your screen.

                Bernard
                Oh — well — now, which one was it, SafeNet or SalfNet? I've got it written on a bit of paper somewhere. The screen's gone a bit blue round the edges but that might be the sun. Is it warm where you are?
              
                Caller
                It's SafeNet Billing, and never mind the weather — that blue round the edges is exactly what I'm talking about. Your machine is on borrowed time, so can we please deal with this before it's too late?
              
                  Urgency or fearFake authority or brand impersonation
                
                Bernard
                Borrowed time, is it. My library book's on borrowed time too — three weeks over, they'll be sending someone round after me. It's a big thick one about lighthouses. Do you read much?
              
                Caller
                Lighthouses, right, lovely. But I'm from SafeNet Billing and this isn't a library matter — that warning on your screen is the official notice, and it means your machine's compromised right now.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Compromised already, is it. Doesn't surprise me — half of it's held together with the sticky stuff. Now the notice, would it be the one with the great red panel across it that keeps blinking at me? Only I don't like blinking at this hour.
              
                Caller
                That's the one, the red panel, and it's blinking because the threat's still live. Now — if you'd just let me have a look at your machine myself, I can deal with it from my end and you won't have to touch a thing.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
Offering to take over the machine removes all effort from the target, so fear plus relief makes handing over control feel like the easy way out.
Real company: A real software or security company never asks to connect into your computer from an unsolicited call, and would point you to support you contact yourself.

                Bernard
                Well, that's kind of you. Have a look from your end, you say. Mind, it's in the back room where the light's poor, so I hope your eyes are better than mine. Are you eating properly? You sound like a young lad who skips his tea.
              
                Caller
                Eyes are fine, thanks, and I've had my tea. This look-at-it business only works if I'm properly connected to your machine — that's the whole point of the call, so if you'd stop asking me about my dinner and just let me in.
              
                  Remote access requestUnsolicited contactFake authority or brand impersonation
                
Framing the connection as the whole point makes it sound like a routine step rather than a favour being asked.
Real company: A real support team never needs to connect into your computer from a cold call, and will tell you how to reach them through official channels.

                Bernard
                Oh, let you in, yes. Only there's a stiff bolt on that door and I'd have to find something to lever it with. Do you know, I've had a letter about this very thing — or a leaflet. Would you hang on while I check the doormat?
              
                Caller
                Honestly, I don't know why I bother. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →