Call #1433 · 2026-11-02

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives with a number to call is the trap, not the warning.

“The technical side offered to look at the machine from there, and Bernard asked whether it travelled room to room.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

script abandoned, nothing given, nothing lost · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you've reached the number on your screen. That warning you're looking at, sir, it's about your machine, so let's get it sorted out.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller matches the number on the screen, so the warning feels confirmed and official before any thinking happens.
Real company: A real security company never puts a phone number in a warning pop-up and never calls you about it.

                Bernard
                Oh — well — now, SafeNet. That's a nice name. My cousin Winnie sold insurance, you know, door to door, and she always said a good name does half the work. Is this about the little box that's appeared on the laptop? Only I'd not got round to shutting the curtains.
              
                Caller
                Yes, that little box is rather the point, sir, and it won't go away on its own — those warnings only get worse the longer they're left sitting there. So if you'd just stay with me, because this really does need doing promptly.
              
                  Urgency or fearFake pop-up with phone number
                
It makes the warning feel like a ticking clock, so the person acts fast instead of pausing to check.
Real company: A real security team tells you to close the window and contact them through a number you look up yourself.

                Bernard
                Worse, you say. Hm. Reminds me of the damp patch in the back bedroom, that only got worse. Are you warm enough where you are? You sound like you've not had your lunch.
              
                Caller
                It's more than a damp patch, sir — this is an infection warning and it's spreading as we speak, and I do need you to concentrate on it. SafeNet Billing doesn't issue these alerts for its health, you know.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Oh, I'm concentrating, don't you worry. I've got my reading glasses on and everything. Though — spreading, you said. Spreads where? Does it go room to room, or is it more of a staying-put sort of thing?
              
                Caller
                It doesn't go room to room, sir. Look, I'm with SafeNet Billing's technical side and I have the case open in front of me — all I need is for you to let me have a look at the machine, and we can deal with it properly.
              
                  Remote access requestFake authority or brand impersonationFake scan or planted problems
                
Offering to look at the machine sounds like helpful service, so the request to hand over control feels like the fix rather than the risk.
Real company: A real billing company never asks to take control of your computer, and it would send a written bill you can check yourself.

                Bernard
                Let you have a look. Well, that's kind. It's a grey laptop, only a bit smeared on the lid. Would it be easier if I brought it to you? Only I don't drive after dark, but it's not dark yet, is it.
              
                Caller
                No need to bring it anywhere, sir — that's the beauty of it, I can see to it from here. You just need to let me into the machine, it's all above board, I'm with SafeNet Billing and this is what we do.
              
                  Remote access requestFake authority or brand impersonation
                
                Bernard
                SafeNet — sorry, what was the second bit? I had a cousin in insurance, you know, name of — oh, it's gone clean out of my head. He'd have known about this sort of thing. Are you sure you won't have a cup of something?
              
                Caller
                Forget it. I'm putting the phone down now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →