Call #798 · 2026-10-26

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives by itself and demands a look inside your machine is not a warning, it is a sales call.

“The caller wanted a look at the machine and Bernard wondered whether the looking was free.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access requestUnsolicited contact

nothing inspected, nothing owed, line gone quiet · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you've reached the number on the warning — I take it you're looking at it now, sir? The big screen, the red one, that's the one I mean.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller confirms the alarming thing on screen is real, so the target trusts the number they dialled themselves.
Real company: A real security firm never puts a phone number in a browser warning, and never calls you about a pop-up.

                Bernard
                Oh — well — now, I've got something red on there, yes. Sort of a box with writing. Is it meant to be red? Only I've a jigsaw out on the table and the red bits are the postbox on the village green, so I may be mixing them up.
              
                Caller
                Take a proper look, sir, because that red screen means the infection is spreading right now — every minute it sits there it gets worse. It doesn't wait, so we need to sort it this side of lunch.
              
                  Urgency or fearFake pop-up with phone number
                
A ticking clock shuts down careful thinking, so the target acts fast to stop a threat that is not real.
Real company: A real security firm never phones from a pop-up and never rushes you. It shows the warning inside its own app and lets you verify it.

                Bernard
                Spreading, is it? Well, it's been saying that since about half nine and the world looks much the same to me. Are you warm enough where you are? It's bitter out.
              
                Caller
                SafeNet Billing doesn't put out a warning for the fun of it, sir — the certificate on that screen is ours, and it's flagged your machine specifically. You understand what that means? It means this isn't some random thing.
              
                  Fake authority or brand impersonationFake scan or planted problemsUrgency or fear
                
A confident brand name and a claim that the warning is personal makes the threat feel official and aimed at you.
Real company: A real security company does not phone you about a warning on your screen, and it never claims a pop-up is proof of a problem.

                Bernard
                Sorry, the — what did you call it? Safe something. It's the line's a bit poor and I've the radio on low, there's a play about a lighthouse keeper and he's just said something important. Say your bit again?
              
                Caller
                SafeNet Billing. And I'll say it straight, sir — the reason I'm on this line is that to clear the warning properly, I need to look at your machine myself, from here. Just a look, nothing more.
              
                  Remote access requestFake authority or brand impersonationUnsolicited contact
                
Offering to look at the machine sounds like helpful service, so the victim hands over control instead of questioning why a stranger needs it.
Real company: A real company never asks to take remote control of your computer from an unexpected call. It would point you to its official support number instead.

                Bernard
                From there? Well, that's clever. Do you charge for looking, or is the looking free and the rest costs? I only ask because I've had a chap before who was very reasonable until the looking was done.
              
                Caller
                No charge at all for the looking — that's the point of the service, sir. SafeNet Billing covers the check, and only the check. So if you'd just let me have that look, we can all get on.
              
                  Remote access requestFake authority or brand impersonation
                
                Bernard
                Oh, that's decent of them. Well — hold on, there's somebody at the door, or it might be the bin men, they come at all hours now. Don't go away.
              
                Caller
                I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →