Call #483 · 2026-10-23

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A pop-up is not a company. No real support desk needs to be let into your machine, and a warning that spreads faster if you wait is only a warning that wants you to hurry.

“Bernard asked twice whether the warning was a sort of red, and offered the caller something hot before anything else.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

no way in, no warning lifted, the caller gave up the line · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing support, you're through to the right place. You've got our warning up on the screen in front of you, haven't you.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It treats the scary pop-up as proof the problem is real, so the target trusts the person who seems to be fixing it.
Real company: A real company never relies on a pop-up to confirm a problem and would contact you through details you already have.

                Bernard
                Oh — hello there. Yes, there's a big red thing filling the whole picture, quite alarming really. SafeNet, did you say? I've written it on the back of an envelope because I'll forget. Now — is it Tuesday today? Only I've been sure it's Wednesday since I woke up.
              
                Caller
                It's Tuesday, doesn't matter — look, that red screen means the problem is active right now, and it spreads faster the longer it sits there.
              
                  Urgency or fearFake pop-up with phone number
                
A ticking clock shuts down careful thinking, so people act on the screen instead of checking it.
Real company: A real security team never treats a pop-up as proof of a problem, and never rushes you to act on it.

                Bernard
                Wednesday, then. I knew it. The thing is, my glasses have gone walkabout, so I'm squinting at this red business from the doorway. Is it catching? Only I had a chest thing in the spring and I'm not keen on another.
              
                Caller
                Nothing you can catch, it's the machine that's in trouble. SafeNet Billing has flagged your device on our systems, so I'm the one who can lift the warning off it.
              
                  Fake authority or brand impersonationFake scan or planted problems
                
A made-up authority name and a vague 'flagged' warning make the listener feel something official is wrong and only the caller can fix it.
Real company: A real company names itself clearly, puts warnings in writing through official channels, and never claims it alone can lift a warning by phone.

                Bernard
                Well that's a relief. Look — before we get into it, are you warm enough where you're sitting? It's turned bitter out. And is that a bit of a cold I can hear? You sound like you need something hot.
              
                Caller
                I'm fine, honestly — I'd rather keep on this while the warning's still up. What I need is to have a look at the machine myself, so if you just let me in for a moment we can sort it.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
Asking to 'have a look' sounds like routine help, and the ticking warning makes waiting feel risky.
Real company: A real security team never asks to connect into your computer from an unexpected call. They tell you to contact them through official channels.

                Bernard
                In? Oh — into the bungalow? The front step's a bit mossy, mind, I keep meaning to see to it. But no, I'm not opening the laptop up for anyone, it took me an age to get the lid working. What colour is the warning usually?
              
                Caller
                It doesn't matter what colour — I can see it from here and it's serious. Just let me take the machine over for a few minutes and the warning's gone.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
                Bernard
                Take it over where? Oh, I don't think it goes anywhere, it's got a lead and everything. Hang on — that's the door. No, it's not. Sorry. You were saying about the warning being a sort of red?
              
                Caller
                I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →