Call #3023 · 2026-11-13

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

No real company will ask you to install software to give you a refund.

“I'll ring you back another day. Bye now.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

caller disconnected, no access granted · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Hello? This is SafeNet Billing. You have a warning on your screen — we need to help you now.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The fake pop-up creates a false sense of urgency and mimics a legitimate security alert to trick the victim.
Real company: A real company would not call you out of the blue and would not use fake pop-ups to solicit your attention.

                Bernard
                Hello? Oh, I thought I heard a knock — perhaps it's the postman. SafeNet Billing? Oh, I've been expecting you. I've had this warning on my screen for ages — it says something about a virus. Do you know, I've been meaning to call someone about it. Have you got any tea?
              
                Caller
                We need to act quickly — the longer it stays, the worse it gets. Have you tried clicking the 'Call Support' button on the warning?
              
                  Urgency or fear
                
Creating a sense of urgency pressures the victim into acting without thinking.
Real company: A real company would explain the situation calmly and clearly without pressuring the user.

                Bernard
                Oh, I did try that — it rang and rang, and then it played my favourite song. I think it was "You'll Never Walk Alone." Do you know, I've been meaning to call someone about it. Have you got any tea?
              
                Caller
                That’s not possible — the 'Call Support' button should connect you directly. Let me check the system. Can you describe the warning on your screen again?
              
                  Fake authority or brand impersonation
                
                Bernard
                Oh, it's red — very alarming. And it has a picture of a cat wearing a hat. Do you know, I've been meaning to call someone about it. Have you got any tea?
              
                Caller
                That’s not our warning — ours has a blue border. Let me get someone to look into it. Can you just let me access your screen to fix it?
              
                  Remote access requestFake pop-up with phone number
                
The caller offers a quick fix that requires control over the victim's device
Real company: A real company would guide you to official support channels without requesting remote access

                Bernard
                Oh, I’d like that — but I’m a bit tied up. Do you know, I’ve been meaning to call someone about it. Have you got any tea?
              
                Caller
                I understand — but this needs fixing now. If you just let me have a look, I can sort it in minutes. Have you tried the 'Call Support' button again?
              
                  Remote access request
                
                Bernard
                Oh, I did — it played my favourite song again. Do you know, I’ve been meaning to call someone about it. Have you got any tea?
              
                Caller
                I'll ring you back another day. Bye now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →