Call #753 · 2026-10-26

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

No real company rings the number on a pop-up warning, and a name that changes to match yours is not the same firm.

“The caller said the name had garbled and the count was climbing, and Bernard asked how anything got from their end to his without a wire.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

warning unread, access never given, line gone · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing here, you've reached the number on the warning that's showing on your screen. Now I can see it's flagged your machine as infected, so shall we get that sorted before it spreads?
              
                  Fake pop-up with phone numberFake authority or brand impersonationUrgency or fear
                
The caller confirms the scary warning already on the screen, so the fear feels verified by an outside voice.
Real company: A real security company never cold-calls you from a pop-up and never asks you to fix an infection over the phone.

                Bernard
                Oh — well — now, that's a relief, someone answering. Though I should say, the warning says Silverfish Billing at the top, in blue. Are you the same lot? Only I've got the radio on rather quiet and I may have misread it.
              
                Caller
                Silverfish, SafeNet — it's the same group, different trading names, the lettering gets garbled when the machine's struggling. The important thing is the infection count on that warning, it's climbing as we talk, so can I just get you to let me have a look at the machine?
              
                  Urgency or fearFake scan or planted problemsRemote access request
                
A rising number creates panic, so the target focuses on stopping the count instead of questioning who is calling.
Real company: A real security firm never cold-calls about a warning on your screen and never asks to look at your machine.

                Bernard
                Climbing, is it? Well I can't say I'm surprised, the thing's been slow as treacle since Tuesday. Let me just find my glasses — they're either by the radio or out on the back step, and that step wants painting before winter, which is the real emergency if you ask me.
              
                Caller
                Forget the step for now, sir — a slow machine is exactly how the infection starts, and it spreads to anything on the same line. I'm the only one who can see the count rising from here, so can we get me looking at that screen?
              
                  Fake authority or brand impersonationUrgency or fearRemote access request
                
                Bernard
                On the same line as what, the telephone? Our Doris is on that line, up in Whitby, and she'd be furious if anything spread to her. Hold on — there's someone at the door. No, it's the bins. Sorry, where were we?
              
                Caller
                Not the telephone line, the machine — and never mind the bins. I've got the warning open in front of me and it won't sit there quietly forever, so I need you to let me have a look at the machine before it locks up entirely.
              
                  Remote access requestUrgency or fearFake scan or planted problems
                
                Bernard
                It's the machine now, is it? I wish you'd said. Old faithful's been threatening to lock up since the Jubilee, mind, and it never does. What is it you'd be wanting to look at, exactly? I can hold it up to the window if the light helps.
              
                Caller
                Holding it to the window won't help, sir — I need to get onto the machine myself from my end and see what it's complaining about. Let me have access and it'll be sorted before the screen gives up entirely.
              
                  Remote access requestUrgency or fear
                
                Bernard
                Oh, you can't do that, I don't let anyone in. Mavis wouldn't have it for a start — she screeches at visitors. Get onto it from your end, you say. Well, how does it get from your end to mine? Is there a wire?
              
                Caller
                Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →