Call #788 · 2026-10-26

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning screen that tells you to call a number is the scam itself, so never phone it and never let anyone in remotely.

“The caller asked to reach in from their end and Bernard offered to start whenever they liked, then the line closed.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearTold to keep it secretRemote access request

no access granted, no damage done, caller signed off · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing here, I'm the one who takes the calls off that warning screen. You've got a red panel sitting on your laptop telling you the machine's infected, haven't you?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
Naming the scary screen makes the call feel connected to something real the person can see, so trust forms fast.
Real company: A real security firm never phones a stranger about a warning on their screen, and never asks them to call a number in a pop-up.

                Bernard
                Oh — well — now, there's a red thing, yes, but I thought it was the screensaver being dramatic. SafeBelt, did you say? My cousin Eric sold insurance, and he always said red meant something was due. Is this urgent, or shall I put the oven on first?
              
                Caller
                SafeNet Billing. And no, don't put anything on, this isn't a thing you can leave sitting — that red panel means it's already started doing damage while we talk.
              
                  Urgency or fearFake authority or brand impersonation
                
It creates panic by claiming harm is already happening, so the person acts fast instead of thinking or checking.
Real company: A real company never claims your device is being damaged right now to rush you, and it does not cold-call about a pop-up.

                Bernard
                Damage, right. Well, I've had the radio on in the other room and it's been crackling all morning, so perhaps it's catching. Hold on — did you say SafeBelt or SafeNet? Eric would've known. He sold policies to half the street and never once got a name right.
              
                Caller
                SafeNet Billing — we're the ones the warning screen points you to, so the name matches or it doesn't work. For goodness sake, can we leave your cousin out of it and keep to what's in front of you?
              
                  Fake authority or brand impersonationTold to keep it secretUrgency or fear
                
Claiming the name matches the warning screen makes the caller seem like the official fix, and pushing the cousin away isolates the target.
Real company: A real company never asks you to hide a call from family, and never claims a pop-up proves who they are.

                Bernard
                Right you are, keep to the red thing. Only it's gone a bit dark now, the screen, so I can't make out much. Are you warm enough where you're sitting? It's turned chilly here and I've only got the one jumper on.
              
                Caller
                Dark is worse, not better — that's it shutting down to try and hold the thing off. I need to get in on the machine before it goes completely, so let me reach it from here.
              
                  Remote access requestUrgency or fear
                
A countdown makes people act fast and hand over control before they stop to think.
Real company: A real software company never asks to connect into your computer from a cold call. It points you to its official support page.

                Bernard
                Reach it how? It's over by the window and my arms aren't that long. Oh, you mean the wires and the like — I've never been handy. The lad who does the garden says not to go poking about back there. Will it take long?
              
                Caller
                No wires, no poking — you just need to give me the go-ahead and I'll see to it from this end. That's a few moments at most.
              
                  Remote access request
                
                Bernard
                The fellow who does my garden says the same, never rush a thing. You start whenever you like, and I'll just be in here.
              
                Caller
                Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →