Call #478 · 2026-10-23

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives with a phone number attached is an advert, not an alarm. Close it and call nobody back.

“The caller offered to reach through the screen, and hung up rather than answer what colour it came in.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

no chairs brought up, no access reached through, the line went quiet · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you've reached the number on your screen. That full-screen warning on your laptop, that's why I'm calling — but I'll let you finish, you were saying something.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller confirms the scary screen is real and ties the call to it, so the warning feels verified rather than random.
Real company: A real security company never phones the number shown in a pop-up, and never treats a pop-up as proof of a problem.

                Bernard
                Oh — well — now. SafeNet, you said? I've written "Safeguard" on the pad here, so I hope that's near enough. The screen's gone all orange and shouty, but I can't read it without my — oh, what are those called — the things for the eyes. Hang on.
              
                Caller
                SafeNet Billing, yes, near enough. Sir, that orange screen means the machine is already infected and every minute it sits there it gets worse, so we do need to move on this quickly.
              
                  Urgency or fearFake pop-up with phone number
                
A ticking clock shuts down careful thinking, so the person acts before checking anything.
Real company: A real security firm never phones from a pop-up and never pressures you to act within minutes.

                Bernard
                Worse how? Is it like damp? Because I had damp in the back room in — no, it was the year after the wedding, I'd have to check. Anyway, is it catching? Only my neighbour's got one of those tablets and she's ever so careful with it.
              
                Caller
                Catching, yes, that's one way to put it — it can spread to anything on the same line. I'm from the technical side at SafeNet and this particular warning is a serious one, so let me just guide you through what's on the screen.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                The same line as the telephone, do you mean? Because that's the same line as the radio, and I was halfway through a play about a lighthouse. Awful lot of shouting in it. Do you want me to go and turn the radio off before we start?
              
                Caller
                No, leave the radio, sir — the warning is on the computer and that's what we're dealing with. Look, I'll be straight with you, the fastest way through this is for me to have a look at the machine myself.
              
                  Remote access requestFake authority or brand impersonationUrgency or fear
                
Offering to look at the machine himself sounds like helpful expertise, so the victim feels relief rather than suspicion.
Real company: A real support team never takes control of your computer from an unexpected call. They ask you to contact them through official channels you look up yourself.

                Bernard
                Have a look? You'd be very welcome, only you're — whereabouts are you sitting? The bus out here is dreadful on a Tuesday, and I'd have to bring the good chairs up from the back room.
              
                Caller
                Not in person, sir — I'm at the SafeNet office, and I don't need to come out. What I'd do is reach through the screen and check the machine from here, if you'd just let me have that access.
              
                  Remote access requestFake authority or brand impersonation
                
                Bernard
                Reach through the screen? Oh, that reminds me — is this the same sort of thing as that programme where the chap climbs into the television? My nephew says it's all done with mirrors. Anyway, what colour does it come in?
              
                Caller
                I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →