Call #493 · 2026-10-23

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives on your own screen and hands you a phone number is not a warning, it is an advertisement for the caller.

“The caller said the red screen meant the machine was compromised and spreading, and Bernard asked whether it needed feeding or would go off on its own.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

no look granted, no software let in, the warning team stood down · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the warning team. You've got our red screen up in front of you, haven't you?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It treats the alarming screen as already proven and asks for a small yes, so the target confirms the problem before thinking.
Real company: A real security firm never puts a phone number on a warning screen and never calls you about it.

                Bernard
                Oh — well — now, that's a red screen, right enough. Or it's more of a scarlet, really. My late wife's sister had a coat that colour, and she wore it to a christening in, oh, it must have been the wrong year. Anyway, you said your lot were Safehouse Billing?
              
                Caller
                SafeNet Billing, yes. That red screen means your machine is already compromised, and it's spreading while we sit here — so I do need you to stay with me on this.
              
                  Urgency or fearFake authority or brand impersonation
                
It creates panic about an active threat so the person stops thinking and hands control to the caller.
Real company: A real security firm never cold-calls about a warning on your screen, and it never asks you to stay on the line.

                Bernard
                Spreading? Goodness. Well, I'm not going anywhere, I've nowhere to be. Now — I had a photograph out to show you, before you rang. It's my nephew at the seaside, and he's holding a crab, and the crab's got its claw right up like it's waving.
              
                Caller
                That's lovely, but the crab's not the emergency here. I'm from SafeNet Billing, and that warning on your screen is an official one — it's logged against your household.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Against my household? Fancy. Now, is that the Safehouse people or the Safeway people, because there's a van comes round here — anyway. Hold on, I need my glasses to read any of this, and I've had them somewhere.
              
                Caller
                It's SafeNet, not — look, leave the glasses, the screen is red and that tells you everything. What I need is for you to let me have a look at the machine from my end, so keep it switched on.
              
                  Remote access requestFake authority or brand impersonationUrgency or fear
                
Asking to connect remotely turns a scary warning into a helpful fix, so the target hands over control of their own computer.
Real company: A real security firm never asks to connect to your machine from a cold call. They tell you to contact them through official channels.

                Bernard
                Well, you're welcome to look, but I wouldn't know how to let you. Oh — I've just had a feel about and there they were, up on my forehead the whole time. Third time this week.
              
                Caller
                On your forehead — right, good, now you can see it properly. It's the official warning page, and there's a support line printed on it that comes straight through to me.
              
                  Remote access requestFake pop-up with phone number
                
                Bernard
                It's red as a postbox, I can see that much. Does it need feeding, this warning, or will it go off on its own?
              
                Caller
                Honestly, I don't know why I bother. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →