Call #1638 · 2026-11-04

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives on your screen and comes with a phone number is an advert, not a diagnosis, so never call it and never let it in.

“Nothing was installed, nothing was paid, and the call went nowhere.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

controls unhanded, check unrun, caller left holding the receiver · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, support line, how can I help? I understand you've got a warning up on your screen — that's exactly the one I'm here about.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller names the exact warning on the screen, so the target believes the pop-up and the person are connected.
Real company: A real company never cold-calls about a warning on your screen, and never treats a pop-up as a support ticket.

                Bernard
                Oh — well — now, that's very good of you to ring. Which firm did you say? Safely Built, was it? I've got something up on the screen all right, a big red thing. I was watching a programme about lighthouses and it appeared over the top of it.
              
                Caller
                SafeNet Billing, that's right. Now that red warning means the machine's compromised, and it can spread to anything else on your network within the hour, so we do need to move on this promptly.
              
                  Fake authority or brand impersonationUrgency or fear
                
A countdown to disaster shuts down careful thinking, so people act fast to stop a threat they were just told about.
Real company: A real security firm never cold-calls about a warning on your screen, and never sets a one-hour deadline.

                Bernard
                Compromised. Oh dear. Does that mean the little box under the telly as well? Only my nephew set that up and I've never understood it. Should I fetch my reading glasses, do you think, so I can tell you what the red thing actually says?
              
                Caller
                No need for the glasses, I can tell you what it says because it's the same warning on every machine. This is a known infection sweeping the country and we're the only outfit licensed to clear it, so I'd rather we started now than later.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Licensed, you say. Well, that sounds official. Do you charge for that, or is it one of those things that comes free with the telly licence? I only ask because I've got a jar of marmalade on the go and the sugar's at the awkward stage.
              
                Caller
                It's not to do with any licence like that, and there's nothing to pay at this stage. What I need is for you to let me have a look at the machine directly — if you just open it up for me I can run the check from my end.
              
                  Remote access requestFake scan or planted problems
                
Offering to look inside the machine feels like help, and the promise of no cost lowers the guard.
Real company: A real support team never asks to open your computer remotely from a cold call, and would tell you to contact them through official channels.

                Bernard
                Open it up. Right. Well, it's already open, isn't it — the red's sitting right there on it. Are you able to see it from your end, or do I need to turn the screen towards the window?
              
                Caller
                Turning it won't help, it doesn't work like that. What I mean is you need to let me connect to it, take the controls for a few minutes, and then I can see everything myself and clear the whole thing off.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
                Bernard
                Take the controls. Oh — now, hang on, the kettle's just whistling, that's me finished. Look, I'll not keep you, you sound rushed off your feet. Thanks for ringing about it. Bye now.
              
                Caller
                I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →