Call #518 · 2026-10-23

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

No real support desk needs a program installed so it can see your screen, and a warning on your screen is not a knock at your door.

“The caller offered a program to reach in and clear the warning and got asked whether it was a tea trolley.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestUnsolicited contact

warning still up, helper never installed, caller gone · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Good afternoon, SafeNet Billing support here — you're through to the right desk, sir. That's our warning sitting on your screen, so let's get it sorted before it spreads.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
A scary warning plus a friendly voice on the phone makes the screen feel official and the caller feel like help.
Real company: A real security firm never puts a phone number in a pop-up and never calls you about it.

                Bernard
                Oh, is that what it is. Now, the thing's been sat there since lunchtime and I'd half a mind it was the weather page gone wrong. Was it you who put the big red box up? Only the cat from next door got in through the fence again and— sorry, what was the company called?
              
                Caller
                SafeNet Billing, and yes, that's ours on your screen. Listen, sir, that box means something's already loose on the machine — every minute it sits there it gets worse, so we really do need to move on this.
              
                  Urgency or fearFake pop-up with phone numberFake authority or brand impersonation
                
It creates panic about an invisible threat so the person acts fast instead of thinking or checking.
Real company: A real security company never cold-calls about a warning box, and real warnings tell you to contact them through official channels.

                Bernard
                Fresh Billing, got it. Well, it's not going anywhere, it's been there since before the fence went over. Now, about that cat — the neighbour swears it's his best behaved, and I'd say that fence is more of a suggestion than a fence. Would you like a glass of squash?
              
                Caller
                It's SafeNet, sir, and no thank you. What I need is to get into that machine of yours and clear the warning, because right now it's letting things through. Shall we start on that?
              
                  Fake authority or brand impersonationRemote access requestUrgency or fear
                
A confident brand name plus a claim that something is already wrong makes people want the problem fixed fast.
Real company: A real security company never phones out of the blue to get into your computer. It shows alerts in its own app and points you to official support.

                Bernard
                Into the machine — oh, it's my granddaughter's old one, she left it here. Did you want to come round to it? Only the bus goes twice a day and the second one's the awkward one. You never said — are you eating proper?
              
                Caller
                No need to come round, sir, we do it down the line. There's a little helper program I can talk you through so I can see the screen and reach in — all you'd do is let me in.
              
                  Remote access requestUnsolicited contact
                
Offering to fix it remotely feels helpful and saves effort, so the target lowers their guard and hands over control.
Real company: A real support team never asks to take remote control of your device from a cold call. You contact them first.

                Bernard
                Let you in where, the house? Only the side gate sticks and there's a ladder in the way. Sorry, the helper — is that a sort of tea trolley thing? My nephew had one of those at his wedding, marvellous bit of kit.
              
                Caller
                Not a trolley, sir. It's a thing I put on your laptop so I can see the warning myself from here and clear it off, and I do need you to let me in before it spreads any further.
              
                  Remote access requestUrgency or fear
                
                Bernard
                Spreads? Oh, like the ivy along the back. Took me three summers, that. You said before it spreads — spreads to where, the shed? Because I've not got the machine out there, it's by the good chair.
              
                Caller
                I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →