Call #1338 · 2026-11-01

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A real security warning never gives you a phone number to call, and no genuine firm needs hands on your machine from afar.

“The caller pressed for access to the machine and the householder offered to describe a photograph instead.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

warning ignored, hands kept full, caller gave up · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you've reached the number on the warning. That screen in front of you, the big red one — it's still showing, is it?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It treats the alarming screen as real and confirms the victim is already worried, so they accept the caller as the fix.
Real company: A real security firm does not cold-call the number on a pop-up and ask you to confirm what is on your screen.

                Bernard
                Oh — well — now, is that SafeNet or Salford? I've got the word wrong, I know I have. Yes, the red thing's still up there, bold as brass. It came on while I was doing the crossword, which I'm stuck on anyway, so it's no great loss.
              
                Caller
                SafeNet, that's right. And it being up there this long is the worry — every minute it sits, it's letting more of that infection settle in.
              
                  Urgency or fearFake pop-up with phone number
                
It turns a harmless pop-up into a ticking clock, so the person acts fast instead of thinking clearly.
Real company: A real security firm never cold-calls about a warning on your screen and never pressures you to act within minutes.

                Bernard
                Let it settle, then, it's not doing much else. Oh — I meant to say, there's a photograph on the sideboard there, my brother in his garden with a hose, and I've been meaning to tell somebody about it. You'd like it. Would you like me to describe it?
              
                Caller
                No — I mean, that's — no, keep your eyes on the red warning, please. This is SafeNet Billing's security arm, and that warning is a live alert from us.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                The security arm. Right you are. Well, I'm looking at it, or near enough, and it says something about ringing a number, which I've done, so that's that ticked off. Are you warm enough where you are? Only it's turned chilly here.
              
                Caller
                I'm — yes, fine, thank you. The reason I ask you to stay with the screen is that I can't do anything about the infection from my end alone, you see. It needs hands on it.
              
                  Remote access requestFake scan or planted problems
                
It frames the problem as impossible to fix without the caller's help, so the victim feels needed and stops questioning.
Real company: A real support team never needs to take control of your screen from a cold call, and would tell you to contact them through official channels.

                Bernard
                Hands on it. Now, my hands are full with this envelope from the council — came Tuesday, I think, or Monday — and I haven't opened it, which is unlike me. Could be anything. Could be about the fence. Do you have fences where you are?
              
                Caller
                Fences, yes — look, the envelope can keep, this can't. I'm from SafeNet Billing's security division, and I have to be honest, your machine is in a bad way right now.
              
                  Fake authority or brand impersonationUrgency or fearRemote access request
                
                Bernard
                In a bad way, is it. Oh dear. Well, it's been like that a while — there's a bit missing somewhere and I've looked everywhere for it. Would the missing bit have anything to do with it, do you think?
              
                Caller
                I'll get someone else to ring you. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →