Call #678 · 2026-10-25

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A real warning on your screen never comes with a phone number to call, and no genuine company needs to connect to your machine.

“The caller pressed for a connection before the fault was ever explained, and Bernard was still on the photograph of the hat.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

no connection made, caller rang off mid-hat · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the warning line — and I can see the alert sitting right there on your screen, so let's not pretend it isn't.
              
                  Fake pop-up with phone numberFake authority or brand impersonationUrgency or fear
                
Claiming to already see the alert makes the problem feel real and confirmed, so doubt fades fast.
Real company: A real security firm never cold-calls about an alert on your screen and would point you to its official app or website.

                Bernard
                Oh, hello — well, I'm glad somebody's looking at it, because I can't make head nor tail. It's a big red thing, the whole screen's gone red. Are you warm enough where you are? I've got the radio on low and it's turned quite close in here.
              
                Caller
                That red screen means the infection's spreading while we chat, so every minute counts here. I really need you to stay on the line and not touch anything until we've dealt with it.
              
                  Urgency or fearFake scan or planted problems
                
A ticking clock shuts down careful thinking, so people act fast to stop a threat that is not real.
Real company: A real security team never phones about a pop-up and never tells you to freeze and stay on the line.

                Bernard
                Spreading. Well. That sounds like the damp in the back bedroom, that's spread too — my nephew says it's the gutter. Now, am I right in thinking it's Tuesday today? I keep thinking it's Thursday, but I've a feeling I've lost a day somewhere.
              
                Caller
                Tuesday's neither here nor there, sir, the thing to focus on is that red warning and who's behind it. I'm calling from SafeNet Billing itself, so you're speaking to the right people — now, about that screen.
              
                  Fake authority or brand impersonationFake pop-up with phone number
                
                Bernard
                SafeNet Billing, right. I'll take your word for it. Only, is that the one that sends the paper bill, or the other lot? Because I've got a photograph here I want to tell you about — it's my nephew on a beach, and there's a donkey in it looking straight at the camera.
              
                Caller
                Your niece's photo can wait, honestly — what matters is the warning's still up, isn't it. If you just let me have a look at the machine from my end, I can see off this alert before it does any harm.
              
                  Remote access requestUrgency or fear
                
Offering to fix the problem personally makes the caller feel helpful and urgent, so the victim hands over control instead of pausing.
Real company: A real security team never asks to connect to your computer from a cold call, and would tell you to contact support through official channels.

                Bernard
                Not niece — the other one. There's a photograph of the two of them on a pedal boat as well, and I want to tell you about the hat. Let me look at the machine — oh, hold on. Glasses were on my head the whole time. Silly.
              
                Caller
                Glasses or no glasses, the warning is right there in front of you, so we haven't got time for the hat. I'm asking you plainly now: let me connect to the machine.
              
                  Remote access requestUrgency or fear
                
                Bernard
                Connect. Right. Oh — well — now, is that the way it works nowadays? The hat, though. It was a sou'wester. Yellow, and too big for him, and it kept falling over his eyes.
              
                Caller
                I'll ring you back another day. Bye now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →