Call #1773 · 2026-11-06

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

No real company will ask you to let them take control of your device to fix a problem.

“I'll have to escalate this.”

Fake pop-up with phone numberUrgency or fearFake authority or brand impersonationRemote access request

caller avoided, no access, no resolution · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Hello, this is SafeNet Billing. You've received a warning on your screen — we need to act quickly to protect your device.
              
                  Fake pop-up with phone numberUrgency or fear
                
The fake pop-up creates a sense of urgency and fear to trick the victim into acting quickly
Real company: A real company would not use fake pop-ups to contact customers

                Bernard
                Hello, SafeNet Billing? Oh — I — I think I might have been on the phone to a cousin of mine, Bert, the other day. He sold insurance, you know. He said something about warnings on screens. I should check my reading glasses. They were on my head, weren't they?
              
                Caller
                Hello, I'm sorry — I need to warn you, the infection is spreading fast. If we don't act now, your files could be lost forever.
              
                  Urgency or fear
                
                Bernard
                Hello — I — I think I'll just have a look for my reading glasses again. I'm a bit hard of hearing in this ear, you know. I'm not sure if I heard you properly. Was that about files? I had a letter from the bank the other day, but it wasn't about files.
              
                Caller
                This is not a drill — your system is under threat. We're authorised by SafeNet Billing, and we're the only ones who can help you right now.
              
                  Fake authority or brand impersonation
                
Claiming exclusive authority creates a false sense of urgency and trust.
Real company: A real company would never claim to be the only one who can help.

                Bernard
                Hello — I — I think I need to check if the kettle's on. Was that something about being authorised? I remember Bert talking about authorisation once. He said it was important for insurance.
              
                Caller
                This is urgent — we need to scan your device immediately to remove the infection. Let me take control remotely.
              
                  Remote access requestUrgency or fear
                
Creating a false sense of urgency and fear makes the victim act quickly without thinking
Real company: A real company would guide you to official support channels and never ask for remote access

                Bernard
                Hello — I — I think I'll just go and check the garden. It's been a while since I watered the plants. Do you think they'd mind if I did it now?
              
                Caller
                We don't have much time — if you don't let me in now, your network could be compromised. I'll have to escalate this.
              
                  Urgency or fearRemote access request
                
                Bernard
                Hello — I — I think I'll just sit for a moment. I'm not sure if I heard that right. Was that about the network? I had a letter from the bank the other day, but it wasn't about networks.
              
                Caller
                I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →