Call #1608 · 2026-11-04

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that tells you to phone a number is a fake, and no real support desk needs to be let into your computer.

“The billing team wanted the machine handed over and Bernard asked after its lunch instead.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

caller hung up first, nothing lent out · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing support, good afternoon. You've done the right thing ringing the number on the warning your screen's showing me.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller praises Bernard for following the number on the screen, which makes the trap feel like his own smart choice.
Real company: A real company never puts a support number in a warning pop-up and never treats a cold call as proof of a problem.

                Bernard
                Oh — well — now, is that SafeBelt? I've got the wireless on in the other room, so you'll have to pardon me. The warning's still up, mind, it hasn't budged. Big red thing. Would you like a cup of tea while we sort it?
              
                Caller
                SafeNet Billing, yes, and I can see that red panel from here — it's getting worse while we talk. Every minute it stays up, more of your files go, so we need to move on this now.
              
                  Urgency or fearFake authority or brand impersonation
                
A ticking clock and visible worsening shut down careful thought before the person can check anything.
Real company: A real security firm gives you time to verify the alert yourself and never pressures you to act within minutes.

                Bernard
                Worse, is it? Hmm. It's a very bright red, I'll give it that — my late wife would've called it pillar-box. Now, you said SafeBelt again, and I want to be sure I've got it right, because my hearing's fine, it's just the phone.
              
                Caller
                SafeNet Billing. The name's on the warning in front of you, in the corner of that red panel. You're speaking to the billing protection team, so let's get your machine secured.
              
                  Fake authority or brand impersonationFake pop-up with phone number
                
                Bernard
                The billing team. Right you are. Only I'd have thought billing would be about money, and I haven't bought anything — unless you count the back step getting painted, and that's a chap from the village. Are you warm enough where you are?
              
                Caller
                No, nothing to buy, and forget the step — this is about the infection on your machine, and it's spreading as we speak. I need to get a look at your screen from my end, so if you'll just let me have access to your computer.
              
                  Remote access requestUrgency or fearFake scan or planted problems
                
Fear of an active infection pushes the person to hand over control before they can think it through.
Real company: A real support team never takes remote control of your computer from an unexpected call, and would point you to their official number.

                Bernard
                Let you have access. Oh — well, that's very kind, but it does all its own thing, the computer, and I wouldn't know how to lend it out. Hang on, the kettle's just clicking off. Have you had your lunch?
              
                Caller
                I don't need lunch, I need to get onto that machine before the damage gets worse. There's a remote tool we use for exactly this — if you just let me in, I can clear the whole thing in minutes.
              
                  Remote access requestUrgency or fear
                
                Bernard
                A remote tool. Is that like a remote control for the telly? Because I've got one somewhere with the buttons worn off, and — no, I'll stop there, I'd only start looking for it. You do sound a bit peckish, if you don't mind my saying.
              
                Caller
                Forget it. I'm putting the phone down now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →