Call #673 · 2026-10-25

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning screen with a phone number is bait, so never call it and never let a stranger take over your machine.

“The caller asked Bernard to agree to a connection before describing the fault, and Bernard asked whether it needed feeding.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access requestUnsolicited contact

no access granted, caller rang off first · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the team that handles the warning on your screen. Before anything else, can you read me the reference number showing at the top of it?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
Reading the reference number feels like a small, harmless step, so the person commits before they have time to doubt the call.
Real company: A real company never cold-calls about a warning on your screen, and it would write to you through its official app or website.

                Bernard
                Oh — hello there. Now, which team did you say? Save-It Billing? There's a whistle coming off my ear thing, hold on — is that better? Reference number, you said. I can't see the top of anything, the screen's gone all blue and shouty.
              
                Caller
                SafeNet Billing, that's the one. And that blue shouting screen is exactly what worries me — that means it's already got past the outer layer, so we really do need that reference off the top before it goes any further.
              
                  Urgency or fearFake scan or planted problemsFake authority or brand impersonation
                
It invents a worsening threat and a ticking clock so the person acts fast instead of pausing to check.
Real company: A real security team never diagnoses a problem from a pop-up and never rushes you to read out a reference number.

                Bernard
                My eye's not what it was, so past the outer layer means nothing to me. Would you like a cup of something while we sort this out? I've got the pot warming, and there's a slice of fruitcake going spare.
              
                Caller
                SafeNet Billing here, and I can see the state that screen's got itself into. Read me the reference from the top of it, before this gets away from us.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Well, I'm looking, I'm looking. There's a lot of writing and a little box, but my glasses are with the radio somewhere. Do you get many of these shouts on a screen? It seems a chancy way to run a business.
              
                Caller
                Don't fret about the writing, I can take the machine over from my end and settle it down. Just let me have a connection to it — you only need to agree to it and I'll do the rest.
              
                  Remote access requestUnsolicited contact
                
Offering to take over the machine removes all effort from the target, so agreeing feels helpful and harmless.
Real company: A real support team never connects to your computer from a cold call. You call them using the number on your bill or their official site.

                Bernard
                Take it over? It's only the laptop, mind, it doesn't go anywhere. Oh — my hearing aid's whistling again, hang about. Does this connection of yours need feeding?
              
                Caller
                It's SafeNet Billing, and I'd rather not be feeding anything, thank you. The warning is on the laptop and it needs sorting, so just say the word and I'll take it off your hands.
              
                  Remote access requestFake authority or brand impersonationFake scan or planted problems
                
                Bernard
                Safebelt, that's it, I knew it was something like that. Well, the word is — oh, hold on, is that the door? No. Safari Billings, did you say? Funny name for it. Has it been long at this game?
              
                Caller
                I'll get someone else to ring you. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →