Call #553 · 2026-10-24

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen that tells you to call a number is an advert for a scam, not a message from a company.

“The caller wanted a look at the machine, and Bernard asked which of the two it was and whether it needed feeding.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

caller asked twice, was shown nothing, hung up on his own offer · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, support line, how can I help? I believe there's a warning showing on your screen right now — that's why I'm calling, well, why you've reached us.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller already knows what is on the screen, which makes the warning feel real and the call feel expected.
Real company: A real security company does not cold-call about a pop-up. You contact them through the number on their own website.

                Bernard
                Oh — hello there. Is that the SafeBelt people? There's a great red thing filling the whole picture, quite alarming, but I must say it's a lovely shade. Do you know, I watched a programme about lighthouses in 1987 and the red ones were always my favourite.
              
                Caller
                SafeNet Billing, yes. That red warning means your machine is in a bad way this very minute — every second it sits there it gets worse, so we need to sort it before it spreads.
              
                  Urgency or fearFake authority or brand impersonation
                
A ticking clock shuts down careful thinking, so the target acts fast instead of checking the warning.
Real company: A real security firm never phones from a pop-up and never claims a countdown is running on your machine.

                Bernard
                Spreads, does it? Like damp. My neighbour had damp and it took a whole summer. Now, is this the sort of thing that would want feeding? Only I've been caught out before with things that need feeding.
              
                Caller
                Damp, no, nothing like that — it's SafeNet Billing on the line, certified support for your device. The warning is official notice, and I'm the one authorised to clear it for you.
              
                  Fake authority or brand impersonationFake pop-up with phone number
                
                Bernard
                Sorry, I've lost the thread of it — now, what was it you were saying?
              
                Caller
                The red warning on your screen, the official one from us — it needs clearing today. To do it properly I'll need to be able to see your machine, so if you'd just let me have a look at it we can get this over with.
              
                  Remote access requestUrgency or fearFake scan or planted problems
                
It pairs a scary deadline with a friendly offer of help, so the fix feels like relief rather than a risk.
Real company: A real software company never asks to view your machine off the back of a warning on your screen, and never sets a same-day deadline.

                Bernard
                Let me have a look? Oh, you'd be welcome, but it's not very tidy in here and I'd have to shift the ironing. Which machine is it — the one in the front room with the big back on it, or the little flat one under the telly?
              
                Caller
                Whichever one is showing the red warning with our number on it. That's why I'm here — SafeNet Billing, the support line you rang from the screen. I'll need to get into that machine, so let's start with that.
              
                  Remote access requestFake pop-up with phone numberFake authority or brand impersonation
                
                Bernard
                The flat one, on the low table. Though it's never shown me red before — only a blue notice about updates, and that went away on its own.
              
                Caller
                I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →