Call #403 · 2026-10-22

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives with its own phone number is bait, because real software does not ring you and ask to be let in.

“The caller wanted a way into the machine and Bernard wanted to know whether the team needed feeding.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

offer dangled, access refused, line surrendered · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the screen warning team. You've got a warning up on your screen, haven't you — that's why you rang the number on it.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It confirms the caller's story before they say anything, so the warning feels real and the number feels official.
Real company: A real security company never puts a phone number in a warning pop-up and never calls you about it.

                Bernard
                Oh, hello there. Well, I rang the number because it was on the screen, yes. I thought it might be about the garden — the back step wants painting before winter, and I wondered if you were the ones doing it. Are you warm enough where you are?
              
                Caller
                No, we're not painters, we're SafeNet Billing. That warning on your screen is serious — if it's left sitting there the whole machine could give up on you by tonight.
              
                  Urgency or fearFake authority or brand impersonation
                
A deadline and a threat of total loss push people to act before they think to check.
Real company: A real billing department sends a written notice and never claims your device will fail by a set time.

                Bernard
                Tonight, you say? Oh. Well, it's been sitting there since Tuesday and it seems no worse. Paperwhite, this billing of yours — is that a sort of pale grey? I only ask because my front door could do with a coat of something.
              
                Caller
                Not paint, no. It's the colour of the alert itself — the pale sort — and it's telling you the machine is properly infected, which is why we've got a team waiting on it.
              
                  Fake authority or brand impersonationFake scan or planted problems
                
A calm, confident voice claiming insider knowledge makes the warning feel official and already confirmed.
Real company: A real security team never calls about an alert on your screen and never claims a team is standing by.

                Bernard
                A team, waiting? For a little old laptop. Do they need feeding, this team of yours? Only I've a tin of something in the cupboard and I'd hate anyone going hungry on my account.
              
                Caller
                They don't need feeding, it's all remote these days. All we need is for you to let me have a look at the machine — give me access to it and I can clear the warning off it.
              
                  Remote access requestFake scan or planted problems
                
Offering to fix a problem he invented makes the victim feel helped rather than robbed.
Real company: A real software company never calls to remove warnings and never asks to control your computer.

                Bernard
                Oh, remote. Like the telly. The remote for my set has gone and hidden itself again, under a cushion I expect. Give me a moment, I'll just check the back step — if the rain's got into the wood it'll want sealing before the cold comes.
              
                Caller
                You can check the step after. The warning on your screen isn't going to sit about while you're out the back — I need to look inside that machine before it gives up entirely.
              
                  Remote access requestUrgency or fearFake scan or planted problems
                
                Bernard
                Before it gives up? Oh dear. Well, what does it want to be when it's better — does it go a nice shade, would you say? I had an uncle who went a bit narrow at the end, you know.
              
                Caller
                Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →