Call #643 · 2026-10-25

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen that comes with a phone number to call is bait, not a message from a real company.

“The caller kept asking to look inside the machine, and Bernard kept offering the photograph of his nephew on the pier.”

Fake pop-up with phone numberFake authority or brand impersonationFake scan or planted problemsUrgency or fearRemote access request

no viewing granted, no wires sorted, line cleared by the other side · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you've reached the number on the warning. Is this the householder with the infected machine?
              
                  Fake pop-up with phone numberFake authority or brand impersonationFake scan or planted problems
                
The caller confirms the number came from a scary warning, so the victim believes they called a real support line.
Real company: A real security company never puts a phone number in a pop-up and never calls you about an infection.

                Bernard
                Oh — well — now, that's a grand word for it. Infected. You'd think the laptop had a cough. Which number did you say you were from, dear? Safe something?
              
                Caller
                SafeNet Billing, that's right, and we need to sort this before anything spreads off that machine. Every minute it sits there, the worse it gets — can you see the red warning still on your screen?
              
                  Urgency or fearFake authority or brand impersonation
                
A ticking clock and a visible warning make people act fast and stop thinking clearly.
Real company: A real billing team sends a written notice and never phones about a warning on your screen.

                Bernard
                SafeNest, got you. Now — I've got a photograph here in a frame, my nephew on a pier with a fish, and behind them the sky's the colour of a duck egg. Shall I fetch my spectacles and read you the warning properly?
              
                Caller
                SafeNet, yes. Bernard, never mind the picture for a moment — that warning means the machine's compromised right now, and I'm the only one who can clear it. Has it gone off the screen or is it still sat there?
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                It's still sat there, bold as brass. But before I read it out — are you eating properly, dear? You sound like a man who's had nothing but a sandwich since Tuesday.
              
                Caller
                That's kind, but let's deal with the warning first. I can clear the whole thing from here if you just let me look at the machine — have you still got that message up?
              
                  Remote access requestFake scan or planted problems
                
Offering to fix the problem from their end feels helpful and saves effort, so the target hands over control without questioning it.
Real company: A real software company never asks to connect to your computer from an unexpected call. It points you to its official support page.

                Bernard
                Let you look at it? Oh, you'd be welcome, but there's a jungle of wires behind the telly and I've no idea which one's which. Sorry — SafeNet, you said. Now, the message is up, but it's in letters too small for me. Hang on.
              
                Caller
                SafeNet, that's right. The letters don't matter so much as what's behind them, so if you'd just let me into the machine I can deal with it from my end. Can you do that now?
              
                  Remote access requestFake authority or brand impersonation
                
                Bernard
                Into the machine? Well, there's a thing. You'd have to come round really — the front door sticks and I'd have to find the key. Now, the photograph, before I forget. My nephew, on the pier, holding a fish this big.
              
                Caller
                I'll ring you back another day. Bye now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →