Call #738 · 2026-10-26

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

Remote access means someone else drives your computer, and no real support line needs that from a cold call.

“Nothing was installed, nothing was paid, and the call went nowhere.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestUnsolicited contact

engineer gone, connection never made · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you've reached the number on the warning. That full-screen alert on your laptop, that's us, and I can see it's still showing.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller treats a scary screen as proof of a real problem, so the target believes the warning and the phone number are connected.
Real company: A real security company never puts a phone number on a warning screen and never calls you about a pop-up you saw.

                Bernard
                Oh — SafeNet, right, so it's you then. Now, the thing is I've got a library book three weeks overdue, and I'm wondering whether that's the panic or whether it's the machine. Can you hold on while I look for my glasses? I've had them somewhere about me all morning.
              
                Caller
                No need to look for anything, sir — the longer that warning sits there, the worse it gets. Machines left sitting with it can lose everything on them.
              
                  Urgency or fear
                
It creates a ticking clock so the person acts fast instead of pausing to check whether the warning is real.
Real company: A real software company never rushes you over the phone and would point you to its official support page instead.

                Bernard
                Lose everything? Well, there's not much on it but a letter to my sister and some photographs of the garden. Oh — now, are you warm enough where you are? It's turned quite sharp out. You sound like you're in one of those big offices.
              
                Caller
                That's very kind, but the office is fine — it's your laptop I'm concerned about, that's the priority. SafeNet's own technicians flagged this one personally, so I'd rather you didn't leave it sitting.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Fellow called me from the bank last year too, very keen. Now, when you say flagged, is that like a bookmark, or more of a sticker? Only I'm not much good with the terminology. And do you take milk? I'm putting one on regardless.
              
                Caller
                Sticker, yes, that sort of idea — an internal one, from our side. Look, I'm the engineer assigned to this fault, so what I need is for you to let me look at the machine directly rather than us going back and forth.
              
                  Remote access requestUnsolicited contact
                
Offering to look at the machine directly sounds like efficient service, so the target hands over control without questioning who is asking.
Real company: A real support team never takes remote control from an unsolicited call. It gives you a number to call back on the one printed on your bill.

                Bernard
                Look at it directly — you mean pop round? Only the front path is a bit uneven, I'd hate you to trip. Are you local, then? I could put the good biscuits out.
              
                Caller
                No, not a visit — over the connection, remote. You'd just let me in at your end and I'd do the looking. It's standard for SafeNet, everyone does it.
              
                  Remote access requestFake authority or brand impersonation
                
                Bernard
                Oh, I see. Well, the door's usually on the latch but I'd have to put the dog out and I haven't got a dog, so that's that muddled. What was the name of the firm again? Half the time I get these things wrong.
              
                Caller
                Honestly, I don't know why I bother. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →