Call #1573 · 2026-11-04

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that appears on your screen and supplies a phone number is not a warning, it is an advertisement for a call you should not make.

“The caller asked to be let onto the machine and Bernard asked whether he would be coming round and what colour the thing would be.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestUnsolicited contact

house call offered, address never given, line surrendered · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you've reached the number on your screen — that warning's sitting right there in front of you, isn't it, the full-screen one?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It points to something already on the screen, so the warning feels self-proving and the caller seems to be the one who can fix it.
Real company: A real security company never puts a phone number in a browser warning and never calls you about a pop-up.

                Bernard
                Oh — well — now, there is something on the screen, yes, a big purple thing. Hold on, I've got the kettle on for a cup. Do you take sugar? I always forget to ask.
              
                Caller
                Never mind the cup — that purple thing means your machine's flagged right now, this second, and it won't clear itself. Is it still on the screen?
              
                  Urgency or fearFake pop-up with phone number
                
A sudden deadline makes people act before they think, and the caller keeps them focused on the screen instead of questioning the call.
Real company: A real security warning appears inside the software itself and tells you to open the app directly, never to trust a stranger on the phone.

                Bernard
                Still there, yes. Big letters, and a little picture of a padlock if I squint. Ooh — my lenses have gone missing again. Ah, they're on my head, aren't they. Silly. What was the name of your firm again?
              
                Caller
                SafeNet Billing, the name's right there under the padlock. Can you read me what it says beside the warning, just so I know it's the right one?
              
                  Fake authority or brand impersonationFake pop-up with phone number
                
                Bernard
                Netfettle Billing, is it? Splendid name. Now, do you want the little words at the top or the ones underneath the cross? There's quite a lot of them and my eyes aren't what they were.
              
                Caller
                SafeNet — SafeNet Billing. Look, I don't need you reading the small print, I need you to let me have a look at the machine so I can clear this off it for you.
              
                  Remote access requestUrgency or fearFake authority or brand impersonation
                
A rushed demand to take control of the computer skips past questions and makes the victim feel the problem is already decided.
Real company: A real software company never asks to take remote control of your computer from a cold call, and would point you to its official support page.

                Bernard
                Have a look at it? Well, it's in the back room and the chair's full up with washing. What colour is the thing you'd be sending? Only I'm partial to a green, and the front room's mostly magnolia.
              
                Caller
                It's not a thing I'm sending, it's me looking at your screen — if you'd just let me onto the machine, this takes no time at all.
              
                  Remote access requestUnsolicited contact
                
Offering to look at the screen feels like help, and the promise of speed lowers the guard against letting a stranger in.
Real company: A real support team never takes control of your computer from a cold call, and would point you to official contact details.

                Bernard
                Oh, you'd come round? That's kind. I'd have to tidy the hall. Would you want a cup of something when you get here, and do you take sugar? I've gone right off it myself.
              
                Caller
                Forget it. I'm putting the phone down now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →