Call #1393 · 2026-11-02

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that appears on your screen and gives you a number to call is the scam, not the emergency.

“The caller stressed the spread of the trouble, and Bernard asked whether he was warm enough where he was.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

warning unaddressed, fire unbanked, no look taken · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the pop-up team. You've got the warning on your screen in front of you, haven't you?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It assumes the warning is real and makes Bernard confirm it, so he accepts the screen as proof of a problem.
Real company: A real company never puts a phone number in a warning pop-up and never calls you about it.

                Bernard
                Oh — well — now, there's a big red thing plastered across it, yes. Only I can't read it properly, my glasses have gone walkabout again. Is that the library wanting their book back? That's three weeks overdue now and I daren't show my face in there.
              
                Caller
                No, it's not the library, sir. The thing on your screen is a serious infection warning, and it's spreading while we sit here — every minute you leave it, it gets worse.
              
                  Urgency or fearFake pop-up with phone number
                
It creates panic and a ticking clock so the person acts fast instead of thinking or checking.
Real company: A real security team never calls about a warning on your screen and never pressures you to act within minutes.

                Bernard
                Spreading, you say. Well, that sounds like the damp in the back bedroom, gets into everything. Are you warm enough where you are? It's turned bitter out and I've had the fire going since noon.
              
                Caller
                I couldn't say about the damp, sir, I'm in a call centre and it's all one temperature. What matters is the warning on your screen — that red thing is blaring because your machine's been compromised.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Compromised. Dear me. Hold on a moment, my slipper's gone under the chair — the left one, always the left — right, got it. Now, what's this red thing meant to be telling me? I've had the radio on, so I've not been paying it any mind.
              
                Caller
                That red thing is telling you your machine is in trouble, sir. I can put it right, but only if you let me look at it from my end.
              
                  Remote access requestFake pop-up with phone numberUrgency or fear
                
It pairs a scary warning with a friendly offer to fix it, so relief feels one click away.
Real company: A real software company never calls about a pop-up and never asks to look at your machine remotely.

                Bernard
                Look at it from your end — is that like the television, when the man comes to fiddle with the aerial? Because we had one of those in eighty-seven, and he was a lovely fellow, had a programme on about lighthouses, I still think about it.
              
                Caller
                It's a bit like that, sir, only I do it down the line rather than up a ladder. So if you just let me have a look at your screen, I can sort the warning out.
              
                  Remote access requestFake scan or planted problems
                
Asking to view the screen feels like a small favour, and the friendly joke lowers Bernard's guard before the real request lands.
Real company: A real support team never asks to view your screen from a cold call, and would give you a number you can verify yourself.

                Bernard
                Well, I'd have to get up, you see, the machine's in the back room and the fire's so nice. Is it urgent, or could it wait while I have a look at my book? It's three weeks overdue and the girl at the desk gives me such a look.
              
                Caller
                I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →