Call #543 · 2026-10-24

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives with its own phone number is a trap, and the number only ever leads back to whoever wrote it.

“The caller asked to be let in from their end and was asked whether it came through the letterbox.”

Fake pop-up with phone numberFake authority or brand impersonationFake scan or planted problemsUrgency or fearRemote access requestUnsolicited contact

offer of entry made, entry refused, line abandoned by the other side · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing here, you've reached the number that came up on the warning. That screen is telling you your machine's in trouble, and I'm the one who can sort it out.
              
                  Fake pop-up with phone numberFake authority or brand impersonationFake scan or planted problems
                
The warning on screen feels like proof, so the person who answers that number seems like the fix rather than the cause.
Real company: A real security company never puts a phone number on a warning screen or cold-calls you about a virus.

                Bernard
                Oh — well, now, that's a relief. I've got the telly on in the corner and I thought the announcement was about the weather. SafeNet, you said? Like the fishing nets. Now then, is this going to take long, because I've got a play on the radio I'm halfway through.
              
                Caller
                It'll take however long it takes to get that warning off your screen, so the play may have to wait. The longer it sits there, the worse it gets, and I'd rather not be the one telling you that later.
              
                  Urgency or fear
                
It makes waiting feel dangerous, so the person acts fast instead of checking the claim.
Real company: A real support team never rushes you. They give you time and a way to verify them independently.

                Bernard
                Halfway through and I've lost the thread already — there's a fellow who might be the brother, or might be the landlord, it's hard to say. Which bit of the machine is in trouble, then? Is it the screen part or the bit underneath?
              
                Caller
                The bit underneath, mostly — that's where the trouble likes to sit, according to what came up on our end. I'm with SafeNet Billing, and I can see the warning plain as day from here, so let's not get bogged down in which piece is which.
              
                  Fake authority or brand impersonationFake scan or planted problems
                
                Bernard
                Plain as day, can you? That's clever, that is. Ours goes a bit fuzzy in the afternoon, usually around the time the sun comes round. Now — do you want a cup of something while we sort this? I can't offer you one down the line, but I feel rude not asking.
              
                Caller
                Very kind, but I can't drink down a phone line, can I. Look, the fastest way past this is for me to have a proper look at the machine myself — if you just let me into it from my end, I can deal with the warning and be off.
              
                  Remote access requestFake scan or planted problems
                
Offering to fix the problem personally feels helpful, and letting someone in feels like the quick way to make the scary warning go away.
Real company: A real support team never asks to connect into your computer from an unexpected call, and will give you a number you can verify yourself.

                Bernard
                Let you in from your end — in through what, the letterbox? Oh, I see, you mean like the man who fixes the boiler. Does that cost anything? Only I've had a fellow before who said he'd have a look and then wanted paying for the looking.
              
                Caller
                No charge for the look, that's the whole point of us. It's all done from here — you don't have to do a thing, just say the word and I'll see about getting in.
              
                  Remote access requestUnsolicited contact
                
Offering to do all the work removes effort and makes the victim feel safe while control quietly shifts to the caller.
Real company: A real support team explains the problem and lets you decide, and never takes control of your device from an unexpected call.

                Bernard
                Say the word, say the word. Let me think. Only the radio's gone and started a thing about a boat, and I lose all track when there's a boat. What word was it you wanted?
              
                Caller
                Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →