Call #1413 · 2026-11-02

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives as a pop-up and supplies its own phone number is the scam calling itself, so hang up and ring the number you already have.

“The security division asked to be let in down the wire, and Bernard went out to rescue a good rinse from the rain.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

washer saved, caller shut down his own line · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Good afternoon, SafeNet Billing support here. That alert on your screen — the full-page one with the number on it — that's my department.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It treats a scary warning the person already sees as real, so the caller seems to be the fix rather than the cause.
Real company: A real company never phones you about a pop-up. You call the number on your own bill or card.

                Bernard
                Oh — well, now, that's a relief, because the thing's been taking up the whole screen and I can't get it to budge. Safebelt, did you say? My cousin Reg sold insurance, years back, and he always said a full page meant trouble.
              
                Caller
                SafeNet. The page is a warning, and it means the machine's compromised right now — every minute it sits there, things get worse. Reg was right about trouble, but this is the live sort.
              
                  Urgency or fearFake pop-up with phone numberFake authority or brand impersonation
                
It turns a scary warning into a ticking clock, so the person acts fast instead of checking.
Real company: A real security firm never phones from a pop-up, and would tell you to close it and contact support yourself.

                Bernard
                Live sort, is it? Well, I've got the radio on in the other room and that's rather live too. Safebelt — that's a funny name. Do you ever get folk ringing up thinking you're a belt shop?
              
                Caller
                SafeNet Billing, and no — people ring us about the warning on their screen, which is still sitting there. This is our security division, and I need you to stay with me on the machine.
              
                  Fake authority or brand impersonationFake pop-up with phone number
                
                Bernard
                Security division. Right you are. Now, hold on a moment, the window's open and there's a wasp coming in and going out again, very undecided. There. Where were we? The page on the screen. Would you like me to read it out to you, or have you got it in front of you?
              
                Caller
                No need to read it — I can see the same page at my end, that's how our system works. What I need is for you to let me have a look at the machine from here, so keep us connected while I come in.
              
                  Remote access requestFake authority or brand impersonation
                
Offering to look at the machine himself feels helpful and expert, so the victim hands over control instead of questioning it.
Real company: A real support team never takes remote control of your computer from an unexpected call, and would tell you to contact them through official channels.

                Bernard
                Come in? Into the bungalow, do you mean, or down the wire? Only we've got the hall carpet being fitted Thursday and there's underlay stacked in the porch. And Reg — my cousin — he sold insurance and never once came in.
              
                Caller
                Down the wire, down the wire. There's a little window you open for me and I'm in — that's how the security teams do it now, everyone does it this way.
              
                  Remote access requestFake authority or brand impersonation
                
                Bernard
                Everyone does it, do they? Well. Oh — the rain's just come on, I'll need to get the washing in or it'll be a waste of a good rinse. You hang on, don't put that phone down.
              
                Caller
                I'll ring you back another day. Bye now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →