Call #1633 · 2026-11-04

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives as a pop-up with a phone number on it was placed by whoever wants you to call it.

“The caller offered to come in through the screen and Bernard offered him a slot on the side of the machine.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

caller hung up on himself, nothing opened, nothing lost · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you've reached the number on the warning, so you're through to the right place. Before anything else, is that screen still up in front of you?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It confirms the number the victim dialled, so the call feels like the victim's own doing rather than a stranger's approach.
Real company: A real company does not put a phone number in a browser warning and wait for you to call it.

                Bernard
                Oh — well — yes, there's a great red thing on the laptop, but I've had to move it, because the coal fire needs another shovel and the laptop sits too near the hearth. What was the name of your firm again?
              
                Caller
                SafeNet Billing. And that red warning means the machine's already compromised — the longer it sits there, the more gets taken, so I'd rather we sorted it while it's still in front of you.
              
                  Urgency or fearFake authority or brand impersonation
                
A ticking clock makes people act fast and skip the checking they would normally do.
Real company: A real security firm never cold-calls about a warning on your screen and never rushes you into acting.

                Bernard
                Safe Bet Billing, right, I'll remember that. Now, taken — taken by who? Only I've had a letter from the council I haven't opened, and I'm wondering if it's them. Are you eating properly, by the way?
              
                Caller
                SafeNet Billing, like safety, and it's not the council — this is a billing security matter, our own warning system flagged your machine. I am eating, thank you, but that red screen is the thing to deal with.
              
                  Fake authority or brand impersonationFake scan or planted problems
                
A made-up security brand plus a claimed internal warning makes the problem sound official and already confirmed.
Real company: A real security firm never cold-calls about a warning on your screen, and never invents a brand to sound official.

                Bernard
                Safe Net, safety, got it. That red thing's very bright, I'll say — does it come in another shade? Only red does shout in a small room.
              
                Caller
                Colour's not my department, I just answer the number on it. Look, if you let me have a look at the machine from here, I can see what it's caught.
              
                  Remote access requestFake pop-up with phone number
                
Offering to look inside the computer feels helpful and technical, so the victim relaxes and hands over control.
Real company: A real support team never takes remote control of your device from a cold call about a pop-up.

                Bernard
                Let you have a look — from where, your end? I've never quite understood how that works. Hold on, the fire's spitting again.
              
                Caller
                From my desk, yes — I'd just need you to let me in on the machine, that's all. The warning's not going to clear itself while you're away from it.
              
                  Remote access requestUrgency or fear
                
                Bernard
                I'm back — spat a bit of coal on the rug. Now, let you in on the machine, you said? It's got a little slot on the side, would that help?
              
                Caller
                I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →