Call #1708 · 2026-11-05

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen is not a person on your phone. Real support never calls to be let in.

“The caller said the machine was infected and needed letting into, and Bernard asked whether he should tidy for a visit.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

caller hung up first, no entry, warning unchanged · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the screen support team. That warning on your screen, sir, that's why I'm on the line, so let's get it sorted.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It treats the alarming pop-up as real and already confirmed, so the person believes the danger is genuine and the caller is the fix.
Real company: A real software or billing company never cold-calls about a warning on your screen, and never asks you to ring a number shown in a pop-up.

                Bernard
                Oh, hello there — now that's a relief, someone who knows about it. SafeNet, did you say? My cousin Wilf sold insurance, not quite the same thing, but he wore a lovely tie. What is it the screen's on about, then?
              
                Caller
                It's saying the machine's badly infected, sir, and these things spread fast once they've started. I really wouldn't leave it sitting like that much longer.
              
                  Urgency or fearFake scan or planted problems
                
A ticking clock and a spreading threat push people to act before they think or check.
Real company: A real support team never rushes you, and a real security tool shows findings inside your own software, not a phone number.

                Bernard
                Infected, you say? Well, I've had the radio on all morning and that's never infected anything. Oh — hold on, it says a number with rather too many nines on it. Is that the bit I'm meant to read out to you?
              
                Caller
                You could read it, but I've got it here anyway. It's my patch, the machine itself, that's the bit I need to look at, and that warning is only the start of it.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Your patch, right you are. Now, are you warm enough where you are? Only it's turned quite sharp here. And would you like tea? I can put the kettle on, it's no trouble, I'm not going anywhere.
              
                Caller
                No, nothing like that, sir. If you let me have a look at it, I mean just let me in to the machine for a moment, that's what clears it.
              
                  Remote access requestFake scan or planted problems
                
Asking to 'just look' sounds small and helpful, so the victim agrees before thinking about what access really means.
Real company: A real software or security company never asks to log in to your computer from an unexpected call. It points you to its official support channels.

                Bernard
                Let you in — well, it's not much to look at, truth be told. There's a dent in the lid my nephew says is from a fall. Oh, wait, it wasn't my nephew, it was my cousin Wilf again — the insurance one. Would you need to see the dent?
              
                Caller
                The dent doesn't matter, it's the inside of it that's the problem. I'm from SafeNet Billing, and I've the clearance to go in and take that warning off, if you'd only let me.
              
                  Remote access requestFake authority or brand impersonationFake scan or planted problems
                
                Bernard
                SafeBelt, did you say? Oh, that's a nice name for a firm. Now, would you be going in through the post, or would it be more of a visit? Because I'd have to tidy if it's a visit.
              
                Caller
                I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →