Call #1458 · 2026-11-02

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A real warning never needs you to read a number off your screen, and a real support line will not give up when you decline.

“The caller offered to put the whole thing in writing, and Bernard said mind the step on the way out.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestUnsolicited contact

letter promised, number withheld, nothing sent · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing here, you're through to the support line for the warning on your screen. That message didn't come from us, so before anything else I need you to confirm what it's showing.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller treats the pop-up as real and offers to help, so the target believes the warning is genuine and trusts the person who rang.
Real company: A real company never phones you about a pop-up on your screen, and it never asks you to read it out to them.

                Bernard
                Oh — well — now, is that SafeNest? That's a nice name, that. I've got the kettle on, so you'll have to bear with me. What was it you wanted me to look at? The screen's on but it's been doing a thing with the weather map all afternoon.
              
                Caller
                It's SafeNet, with an N. The weather map can wait — that warning means the machine's locked itself down, and it needs dealing with sharpish, so I need what's on the screen in front of you.
              
                  Urgency or fearFake authority or brand impersonation
                
A borrowed brand name plus a ticking-clock warning pushes the listener to act before thinking.
Real company: A real security firm never cold-calls about a warning on your screen, and never rushes you.

                Bernard
                SafeNest, right, got it. The screen's just sitting there looking sorry for itself, I haven't touched it. My neighbour's lad sets these things up, would it be worth asking him? He's very good with this sort of caper.
              
                Caller
                No need to trouble him — nobody's better placed to sort this than the people who issued the warning, and that's me. Has it put a support number up anywhere on that screen?
              
                  Fake authority or brand impersonationFake pop-up with phone number
                
                Bernard
                A number, is it? There's a lot of numbers, if I'm honest. Let me get my glasses — no, hold on, they're on my head, aren't they. Do you need the long one at the top or one of the little ones down the side?
              
                Caller
                The one that looks like a support line, usually at the top. And while you've got the specs on, have a proper look — is there any sign the machine's letting anyone else in besides you?
              
                  Remote access requestFake pop-up with phone number
                
It turns a stranger's request into a task you perform yourself, so you feel in control while doing what they want.
Real company: A real support team never asks you to check for intruders or hand over access from a cold call.

                Bernard
                Letting anyone else in? I shouldn't think so. Oh — the top one, yes, there's a number there. I'd rather not read it out, if it's all the same to you. Never know who's earwigging, do you?
              
                Caller
                That's a sensible instinct, and honestly I've given up on the number — I can't fix this over the blower anyway. I'll get the whole thing down in writing and send it round to you instead.
              
                  Remote access requestUnsolicited contact
                
Offering to put things in writing sounds careful and honest, which lowers the listener's guard before the real request arrives.
Real company: A real support team would give you a reference number and ask you to call the number on your bill or their official website.

                Bernard
                In writing, would you? That'd be nice. You could put it through the door, only mind the step — it's a bit loose. Was there anything else, or shall I let you go?
              
                Caller
                I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →