Call #2548 · 2026-11-10

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

No real company will shout at you to install software or give them access.

“I'll try again when the line's behaving. Good afternoon.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

caller tried again, no access gained · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Hello, you're through to SafeNet Billing. I see the warning on your screen — it says your system is infected. You need to act now.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The fake pop-up creates a sense of urgency and falsely claims authority to trick the victim into acting quickly
Real company: A real company would never call or display a pop-up warning about your system being infected

                Bernard
                Hello, yes — I saw that, didn’t I? The warning — oh, the poor thing, it looked so worried. I don’t know about this SafeNet Billing — did I not mean Safenot? I’m a bit confused with the names. I was just thinking about my cousin who sold insurance — he had a name like that.
              
                Caller
                This is not a joke, sir. The warning is real. If you don't call the number now, your files will be deleted in thirty seconds.
              
                  Urgency or fear
                
Creating a false sense of immediate danger forces quick, emotional decisions.
Real company: Warn without demanding immediate action and provide clear steps to resolve the issue.

                Bernard
                Oh — well — now, that sounds rather alarming. I shall have to fetch my reading glasses. Do you know, I was just making a spot of tea. If you’ll forgive me, I need to check the kettle’s on. I do hope you’re not in any bother — it’s very cold outside, isn’t it?
              
                Caller
                Sir, we are acting on behalf of the security team. Your system is under attack. You must connect me now — or your data is gone.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Oh, I do wish they’d stop shouting. I was just thinking about the garden — it’s looking rather pretty today. I do hope you’re not too upset — it’s a lovely day for a spot of gardening, isn’t it?
              
                Caller
                Sir, this is not a drill. You have thirty seconds to let me access your machine — or your files are deleted. This is not a joke.
              
                  Urgency or fearRemote access request
                
Creating panic forces the victim to act without thinking
Real company: Warn of risks and offer help through official channels

                Bernard
                Oh, I do beg your pardon — I was just reaching for the biscuit tin. If you’ll excuse me, I thought I heard something rattling in the kitchen.
              
                Caller
                Sir, your time is running out. Let me in now — or your files are gone. This is the last warning.
              
                  Urgency or fearRemote access request
                
                Bernard
                Oh — well — now, I shall have to fetch the glasses. I do wonder what time it is — I rather lost track.
              
                Caller
                I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →