Call #388 · 2026-10-22

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning already on your screen did not come from the company it names, and no one needs remote access to clear it.

“The caller said the warning was theirs to begin with, and Bernard wondered whether it was heavy.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

access refused, warning unclaimed, caller signed off · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, that warning on your screen — you're through to the right place. Can you tell me what it says across the top, in the coloured bar?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It treats the pop-up as real and asks Bernard to read it aloud, so he accepts the warning and the caller as genuine.
Real company: A real security firm does not cold-call from a pop-up. You contact them through a number you look up yourself.

                Bernard
                Oh — well, now. SafeBelt, is it? I've got my glasses somewhere but they're not on my face. It's got a big red band across it. Reminds me of a cousin of mine, sold insurance, always wore a red tie, though he never once paid out.
              
                Caller
                That red band means the machine's already flagged as compromised, so we need to move before it spreads. Forget the cousin for a moment — what does it say, just under the red?
              
                  Urgency or fearFake scan or planted problems
                
A scary warning plus a deadline makes people act fast and stop thinking clearly.
Real company: A real security team never rushes you off the phone, and they never treat a pop-up as proof of a problem.

                Bernard
                Under the red? Give me a moment, I'll lean in. It says something in capitals, quite cross-looking, and there's a little line of numbers underneath. Shall I put the phone down and fetch my other pair? They're upstairs on the chest.
              
                Caller
                No, keep the phone right with you — those numbers are our priority line and I need to confirm you've got the genuine article. SafeNet Billing put that warning there ourselves, so you're in the right hands.
              
                  Fake authority or brand impersonationFake pop-up with phone number
                
                Bernard
                You put it there yourself? Well that's a relief, I thought it had come in by itself, like the way the radio does sometimes. Is it heavy, this thing? Only I'm wondering whether the shelf would take it.
              
                Caller
                It's not a physical thing, it's already sitting on your machine — that's rather the worry. Look, the fastest way to settle this is for me to take a look at the screen myself, so if you let me have access to it I can clear the warning from my end.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
Offering to fix the problem personally feels helpful, and the vague threat of something already on the machine makes handing over control seem like the quick way out.
Real company: A real software company never asks to control your screen from an unexpected call, and would point you to support you contact yourself.

                Bernard
                Take a look at it from your end — is that like the chap who reads the meter without coming in? Because I've got a young fella does that now, and I've never once seen him.
              
                Caller
                Not quite — I can't do this one from a distance, or I would have. You'd just be letting me look at what's on the screen, and then I'll be out of your hair and the warning's gone.
              
                  Remote access requestFake scan or planted problems
                
                Bernard
                Oh, I see. Well, it's my nephew's machine really — he set it up and I'm not to go fiddling. Not that I'd know where to start. Is this a billing matter at all, or is it more the technical side?
              
                Caller
                Honestly, I don't know why I bother. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →