Call #1448 · 2026-11-02

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that tells you to call a number is the scam, so no legitimate warning will ever be solved by phoning it.

“The agent insisted the box could not clear itself, and Bernard asked whether clearing it needed a torch brought along.”

Fake pop-up with phone numberUrgency or fearFake scan or planted problemsFake authority or brand impersonationRemote access request

no screen opened, no number taken, caller rang off first · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you've reached the number on the warning that's on your screen right now. Yes, that's why I'm calling you — so let's just deal with it before it gets worse.
              
                  Fake pop-up with phone numberUrgency or fear
                
The caller confirms the scary screen is real and adds a ticking clock, so the person trusts the number they dialled.
Real company: A real security firm never puts a phone number on a warning screen and never calls you about it.

                Bernard
                Oh — well — now, is that SafeBelt Billing? The thing on the screen, yes, it's a big red box. I've got a photograph here of my niece at the seaside, she's holding an ice cream and it's gone all down her sleeve, you'd laugh.
              
                Caller
                SafeNet Billing, yes. Never mind the photograph for a moment — that red box means the infection is spreading while we talk, so this really can't wait.
              
                  Urgency or fearFake scan or planted problems
                
A ticking clock shuts down careful thinking, so the target acts before they can check the claim.
Real company: A real security firm never rushes you on a call and would put findings in writing you can verify yourself.

                Bernard
                Spreading, is it. Well, the little tower thing under the desk hasn't made a peep. Would you like a cup of tea while we sort it? I'm putting the water on anyway.
              
                Caller
                SafeNet Billing doesn't do tea, sir, we do billing security, and I'm the only one on this line. That red box is your machine telling us it's compromised — the box isn't going to wait for the water.
              
                  Fake authority or brand impersonationUrgency or fear
                
A confident title and a claim of sole authority make the warning sound official and hard to question.
Real company: A real security team gives you a reference number and a number you can call back on their published website.

                Bernard
                Oh, only the one on the line, are you? That's a shame, you'd have company. Now then — the box is red with a number on it, and I'm meant to ring it, and here I am ringing it and we're chatting. So that's the job done, isn't it?
              
                Caller
                Ringing it isn't the job done, ringing it is only the start of it. The warning doesn't clear on its own, sir, someone has to actually get inside the machine and clear it.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
It reframes a harmless phone call as unfinished work, so the target feels responsible for fixing a problem that does not exist.
Real company: A real security team never needs to get inside your machine from a cold call, and would tell you to contact them through official channels.

                Bernard
                Inside the machine. Well, the cat next door got inside the shed once, took us an afternoon. Is it like that? You'd want to bring a torch.
              
                Caller
                No torch, no shed, and no cat, sir, it's a remote thing, you'd hardly have to lift a finger. SafeNet Billing just needs you to let me have a look at it, that's all this is.
              
                  Remote access requestFake authority or brand impersonation
                
                Bernard
                A look at it. Well, you're very welcome to look, but there's a thing on the table that's got me beat and I want your opinion. It's a seaside snap, and I can't tell if it's my brother or my cousin in the middle.
              
                Caller
                I'll ring you back another day. Bye now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →