Call #1563 · 2026-11-04

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning page that arrives with a phone number and a person on the line is a script, not a service.

“The caller asked for a string of characters and Bernard offered the weather and a loose set instead.”

Fake pop-up with phone numberFake scan or planted problemsFake authority or brand impersonationUrgency or fearRemote access request

reference hunted, reference withheld, caller hung up first · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing support, you're through to the right place. That warning on your screen, the full-page one, that's why I'm calling — it's flagging your machine as compromised right now.
              
                  Fake pop-up with phone numberFake scan or planted problemsFake authority or brand impersonation
                
A scary full-screen warning makes people believe a real problem exists and that the caller is the fix.
Real company: A real security company never calls about a pop-up. You would contact them through a number you look up yourself.

                Bernard
                Oh, well, that's a relief — someone to talk to about it. It's a very big page, isn't it? All red. Actually, have you eaten? I've got marmalade on the go, my own, and I'm never sure about the set on it.
              
                Caller
                Red and full-page, that's the one. It means something's active on there at this moment, so we really shouldn't sit on it — can you stay with me while we deal with it?
              
                  Urgency or fearFake pop-up with phone number
                
It turns a scary screen into a ticking clock, so the person acts fast instead of thinking or checking.
Real company: A real security team tells you what happened in writing and never rushes you off the phone to fix it.

                Bernard
                SafeWeb, you said? Funny name. Yes, I'm not going anywhere — the set's the thing, it's gone a bit loose, it might be the pips. Do you make yours with the peel in or out?
              
                Caller
                SafeNet Billing, and I'm the support line for that warning, so let's keep our eyes on the screen. There'll be a reference on it for me to verify you — can you see one?
              
                  Fake authority or brand impersonationFake pop-up with phone number
                
                Bernard
                A reference. Now then. Hold on, my glasses are on top of the radio, I know I left them there. It's a lovely afternoon out, is it where you are?
              
                Caller
                Grey and drizzly here, and I'm afraid I'm on the clock. Have you found that reference on the screen yet? I need it before we can go any further.
              
                  Remote access requestUrgency or fear
                
A ticking clock makes people hunt for whatever is asked rather than stop and question the request.
Real company: A real support agent gives you time and never rushes you toward a screen code.

                Bernard
                Oh, drizzle's miserable, you want to keep your feet dry. Right — reference — well, there's a lot of writing, most of it's very small, and there's a picture of a padlock that looks a bit unhappy. Does that count?
              
                Caller
                The unhappy padlock is exactly what I mean — that's the infection marker. Now, is there a long string of characters anywhere near it, something I can check you against?
              
                  Fake scan or planted problemsRemote access request
                
                Bernard
                A long string. Well, this is the thing, there's a lot of characters knocking about — some of them are upside down. Should I be reading them, or is it more of a decoration?
              
                Caller
                I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →