Call #713 · 2026-10-25

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A red warning screen is not a summons. Real support never rings you to look at your own machine.

“The caller offered to look at the machine from his side, and Bernard asked whether he had eaten.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

look never set up, the line cleared by the other end · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the team that handles the warning on your screen — that full-screen message, the big red one. Can you confirm you're seeing it right now?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It treats the scary screen as already proven and asks you to confirm it, so you accept the warning as real.
Real company: A real security firm never phones you about a pop-up. You would look up their number yourself and call them.

                Bernard
                SafeNet, you said? I've got it down on my pad as Salford Billing, so I hope that's the same lot. The screen's gone all red, yes. Big letters. The budgie next door has started doing the phone, you know.
              
                Caller
                It's SafeNet, yes, Safenet Billing, don't worry about the pad. That red screen is the serious bit — the longer the machine sits with that warning on it, the worse the damage gets, so we really need to move on this today.
              
                  Urgency or fearFake authority or brand impersonation
                
A ticking clock makes people act before they think, and a named brand makes the warning feel official.
Real company: A real security firm never phones about a warning on your screen, and never says damage grows with time.

                Bernard
                Oh, today, right. Well, I'm not going anywhere. What was it you wanted me to look at? Only my eyes aren't what they were after four o'clock.
              
                Caller
                That's why I'm here — the warning's doing the work, you just tell me what you see. It's asking you to get in touch with us, and now you have, so we can deal with it from this end. Are you at the machine now?
              
                  Fake authority or brand impersonationFake pop-up with phone number
                
                Bernard
                I am, I am, I've pulled the chair over. It does say get in touch, you're right. Though there's a little box in the corner saying how lovely the weather's been. Do you deal with this a lot, then?
              
                Caller
                All day, every day. What that box wants is for us to have a proper look at the machine from our side — so if you're sitting comfortably, I'll talk you into letting me have that look.
              
                  Remote access requestFake pop-up with phone number
                
Asking to look at the machine from their side sounds like routine support, so the victim hands over control without suspecting anything.
Real company: A real software company never asks to take remote control of your computer after a pop-up tells you to call a number.

                Bernard
                A proper look, yes. Well, you're very welcome to look, though I should say I've got nothing worth pinching on there. Now — before we start, have you eaten? It's gone three and I've only had a slice of something.
              
                Caller
                That's kind, but I'll not stop. The look I mean isn't from your end at all — I'd be on the machine directly, seeing what the warning sees. Can we get that set up now?
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
Offering to look inside the machine feels like expertise and care, so the victim hands over control to stop the warning.
Real company: A real security team never asks to take over your computer from a cold call, and would point you to support you contact yourself.

                Bernard
                Right you are, right you are. Though — hold on — that's the phone going in the hall. No, it's the bird next door, he's learned the ring of it. Clever as anything. Where were we?
              
                Caller
                I'll ring you back another day. Bye now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →