Call #728 · 2026-10-26

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives on your own screen and hands you a number to ring is not a warning, it is an advert.

“The man from the billing line could not say where he was sitting, and Bernard never did get an answer about the hat.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

red warning stayed red, caller left holding the receiver · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the pop-up support line. That warning on your screen is from us, so you've done the right thing ringing the number on it.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It confirms the scary warning came from a real company, so the person stops doubting the screen and trusts the voice.
Real company: A real security company never puts a phone number in a warning pop-up and never calls its own pop-up a support line.

                Bernard
                Oh, well, that's a relief, because I wasn't sure if it was for me or for next door. SafeNet, you said — I'd have guessed Satin Billing, and I've been picturing curtains. Is it a big screenful of red at your end too?
              
                Caller
                Red, yes, exactly, and it's red because the machine is in a bad way right now. Every minute it sits there like that it gets worse, so we really should sort it while we're both on the line.
              
                  Urgency or fearFake scan or planted problems
                
A ticking clock makes people act fast and skip the step of checking whether the problem is real.
Real company: A real support team explains the issue in writing and lets you verify it at your own pace.

                Bernard
                Right, yes. Hold on a tick — there's a photograph on the sideboard I meant to ask you about, only it's the wife's sister in a hat, and I can't tell if it's a wedding or a christening. What colour would you say the hat is?
              
                Caller
                Sir, SafeNet doesn't do photographs, we do infected machines. The warning is still up, isn't it, so let's not get distracted from what's red and blinking at you.
              
                  Fake authority or brand impersonationFake scan or planted problems
                
                Bernard
                Satin doesn't do photographs, fair enough. It's still blinking, yes, though I've turned the lamp off so it's easier to see — do you find these things look worse in the evening?
              
                Caller
                I wouldn't know about the evening, I'm on the line, not in the room. Look, the machine is bad and getting worse, so the only way through is for me to have a look at it myself from here.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
It frames the problem as worsening and unfixable any other way, so letting a stranger in feels like the only sensible choice.
Real company: A real support team would offer to walk you through checks yourself, or book a visit, and never ask to reach into your machine uninvited.

                Bernard
                From there? Well, I've got a cousin who sold insurance and he was forever looking at things from where he was. Which reminds me — was the hat red or was that the christening?
              
                Caller
                The hat isn't SafeNet's concern, sir. Mine is the state of that machine, and I can't do a thing about it from here unless you let me in — that's the whole of it.
              
                  Remote access requestFake authority or brand impersonation
                
                Bernard
                Ah, you'd need to come in. Well, the front door sticks a bit, so give it a good shove — no, wait, you're on the line, aren't you. Where is it you're sitting, exactly?
              
                Caller
                I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →