Call #638 · 2026-10-25

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen is not a phone call, and no real support line will ask to come onto your machine.

“The caller said the red panel was spreading on its own, and Bernard said he had not touched it, so it could move as it liked.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

screen still bright, machine untouched, caller rang off · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Morning, SafeNet Billing support here, you've reached the right line. You've got a warning up on your screen in front of you, haven't you — I can see it from my end.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
Claiming to already see the warning makes the caller seem to have inside knowledge, so the listener trusts the screen and the voice together.
Real company: A real company never watches your screen or calls about a pop-up. You contact them through a number you look up yourself.

                Bernard
                Oh — well — now, Sainsbury's Billing, is it? That's a mouthful. Yes, there's a great red thing filling the window, I can't get past it. Do you know, it's very bright. My eyes aren't what they were. Would you be warm enough sitting there all day?
              
                Caller
                It's SafeNet Billing, and yes, that's the one — that red panel is the infection spread showing. It's moving on its own now, so we really do need to get ahead of it this morning.
              
                  Urgency or fearFake scan or planted problemsFake authority or brand impersonation
                
A scary on-screen warning plus a ticking clock pushes people to act before they think to check.
Real company: A real security firm never cold-calls about a warning on your screen, and never asks you to hurry.

                Bernard
                SafeNet, right you are. Moving on its own — well, I've not touched it, so it can move as it likes. Are you eating properly, though? You sound like a young fellow who's skipped his breakfast. I've a jar of my own marmalade here, made in September, and it's a good batch.
              
                Caller
                That's kind of you, but never mind that — the panel is still up and it's getting worse while we chatter. I'm from the billing end of the outfit, and this has been flagged against your address, so I need you to stay with me.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Against my address, you say. Is that a subscription sort of thing? Only I gave up a magazine last year and it kept arriving regardless. Bright red cover on it, funnily enough. Anyway — where had you got to?
              
                Caller
                Where I'd got to is this: I need to come onto your machine myself and clear that warning from the inside, or it stays put. It's not a magazine, it's your equipment, and I can't do a thing about it from this end.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
It frames the problem as unfixable unless you hand over control, so refusing feels like the only thing keeping the danger alive.
Real company: A real support team never takes remote control of your device from an unexpected call, and would tell you to contact them through official channels.

                Bernard
                Come onto it — how do you mean? Like a lodger? Only my late husband used to say I let anyone in. I'll tell you what, though, the phone's been making a funny noise and there's someone at the door. Hold on a tick, don't go anywhere.
              
                Caller
                Please don't put the phone down, sir, because this is the last thing I need today. If you're still there, I just need you to let me have a look at the machine before that warning spreads any further.
              
                  Remote access requestUrgency or fear
                
                Bernard
                Still here, still here — no, that was only the baker's van, wrong street again. Now, look at it. You keep saying look at it. I'm sat here with my tea and I can see the whole thing perfectly well. What am I meant to be noticing?
              
                Caller
                I'll get someone else to ring you. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →