Call #1418 · 2026-11-02

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives on your own screen is not a phone call you owe anyone, and no support line needs to reach into your machine.

“Nothing was installed, nothing was paid, and the call went nowhere.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

access never granted, caller gave up the line · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the support line — is that the warning on your screen you're calling about?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It assumes the call is expected, so the person believes they dialled a real support line and drops their guard.
Real company: A real company never puts a phone number in a warning pop-up and waits for you to call it.

                Bernard
                Oh — hello there. Yes, the screen's gone all red and shouty at me. I don't know if it's the screen or the machine, mind. Would you be warm enough where you are? It's turned quite sharp out.
              
                Caller
                Red and shouty is exactly the one, sir — it means the thing's already spreading. Every minute it sits there it digs itself in deeper, so we'd best not leave it.
              
                  Urgency or fearFake scan or planted problems
                
A scary colour and a ticking clock push the person to act before they can think or check.
Real company: A real security team tells you what was found in plain terms and gives you time to verify it yourself.

                Bernard
                Spreading. Right you are. Oh — now — the tin. Sorry, I've got the lid on this tin and it's not for shifting. Do you ever have that, with a lid?
              
                Caller
                I'm SafeNet Billing, sir, we don't do lids. Now the warning — it's flagged your machine at our end as compromised. I just need to reach into it and have a look, and we can stop it there.
              
                  Fake authority or brand impersonationRemote access requestFake scan or planted problems
                
A confident brand name plus a scary claim about the machine makes people hand over control before they think.
Real company: A real security firm does not cold-call about your machine and never asks to reach into it.

                Bernard
                SafeNet, is it? Safeway. I'll remember that. Reach into the machine, you say — would that be like the man who fixed the wireless, with the little case? He was ever so good.
              
                Caller
                SafeNet, yes, like I said. No case and no wireless, sir — I'd simply need you to let me into the machine properly, and then I take over and clean the infection out from my side.
              
                  Remote access requestFake authority or brand impersonation
                
                Bernard
                Into the machine. Well — that would be easier if the screen would stop shouting at me. Hold on a moment, would you? The tin's won. I might need a knife.
              
                Caller
                Sir, please — the warning, not the tin. If you could just let me have access to the machine, I'll deal with the shouting myself in a few seconds flat.
              
                  Remote access requestUrgency or fear
                
                Bernard
                A knife on a biscuit tin sounds a bit serious. Oh — you mean the laptop. Yes. Well, it's in the front room and I'm in the kitchen, and these legs take a while. Are you eating properly, out there?
              
                Caller
                Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →