Call #1663 · 2026-11-05

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives by itself and carries a phone number is bait, not a message from anyone who knows your machine.

“The caller said the warning would worsen the longer it sat, and Bernard asked whether he should read it out or the caller could see it from his end.”

Fake pop-up with phone numberFake scan or planted problemsUrgency or fearFake authority or brand impersonationRemote access request

caller gave up the floor, nothing viewed, nothing taken · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing support, you've reached the right team. That warning on your screen — I can see it on my end too, so let's deal with that before it spreads.
              
                  Fake pop-up with phone numberFake scan or planted problemsUrgency or fear
                
Claiming to see the same warning makes the problem feel verified and shared, so the target trusts the caller's diagnosis.
Real company: A real security team never calls about a pop-up and never claims to see your screen without your permission.

                Bernard
                Oh — well — now, that's clever, seeing it from your end. Hang on, there's a wasp in the window and he's been at it all morning. SafeNet, you said? I've written that down somewhere. Probably on the back of an envelope.
              
                Caller
                Never mind the wasp, Mr — sir — the warning on your screen means your machine could lock up at any moment, and that's the last thing you want on a day like this. Is the screen still showing the number you rang?
              
                  Urgency or fearFake pop-up with phone number
                
                Bernard
                It is, yes, in big red letters. Now — do you take sugar? Only I've got the pan on, and it's no trouble. My glasses are somewhere about me, I can never find them, they'll be on my head knowing my luck.
              
                Caller
                I'll pass on the sugar, thank you. The red letters mean the machine is flagged on our system — that's from SafeNet Billing, we handle the protection on it, so I do need you to stay with me on this.
              
                  Fake authority or brand impersonationUrgency or fear
                
A made-up company name and a claim of official oversight make the warning sound backed by an outside authority.
Real company: A real security team names itself clearly and gives you a reference number you can verify by calling the number on your bill.

                Bernard
                SafeNet, that's right, I had it as Safenet Billing but that's near enough. This machine's only two years old, mind — or three. It was my sister's, she had it before me. What does flagged mean, is it like a fence?
              
                Caller
                It's not a fence, no — it means our system's marked your machine as unsafe until we've had a look at it. Safenet Billing deals with this all day long, so there's nothing to worry about as long as we get it sorted this morning.
              
                  Remote access requestUrgency or fearFake authority or brand impersonation
                
It reframes a strange request as routine housekeeping and adds a deadline, so the target feels safe and rushed at once.
Real company: A real company never needs to look inside your computer to fix a billing question, and never sets a same-morning deadline.

                Bernard
                Oh, this morning. Well, I'd have to get the back step painted before the weather turns, that's the job today. Is it a long sort of look, this look? Because I've got a fella coming about the gutters and I don't want to miss him.
              
                Caller
                It won't take any time at all if you let me have a look at it now. The warning won't clear itself, and the longer it sits there the worse Safenet Billing marks the machine — I'd honestly do it before your man turns up.
              
                  Remote access requestUrgency or fearFake authority or brand impersonation
                
                Bernard
                Hold on — hold on, that's the other phone, that'll be him now. Back in two ticks. There. Wrong number, would you believe. Now. You were saying about a warning on the machine — do you want me to read it out to you, or can you see it your end?
              
                Caller
                Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →