Call #803 · 2026-10-26

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning on your screen with a number to call is the con itself. Close the window and ring nobody.

“The caller wanted to see the screen through the line and Bernard was on the back step with the door to get through.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

no look given, no fault proven, caller rang off · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing support, good afternoon. You've got the warning up on your screen, haven't you — that's why you rang, so let's sort it out.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It assumes the warning is real and frames the call as help, so the person feels they started it and trusts the voice.
Real company: A real security firm never puts a phone number in a browser warning, and never calls you about a pop-up.

                Bernard
                Oh — well, now. SafeNet, you said? I've got a warning here, yes, a big red thing, very red. Only I'd just sat down with the radio on, and there's a detective on it who's about to say who did it, so this is a bit of a clash.
              
                Caller
                The radio can wait, sir — that warning means your machine is compromised right now, this minute, and every second it's sat there is another second of damage. Do you want to leave it running while you find out who the detective likes for it?
              
                  Urgency or fearFake scan or planted problems
                
A ticking clock shuts down careful thinking, so the target acts fast to stop a threat that does not exist.
Real company: A real security warning names the specific problem and lets you verify it calmly, with no countdown.

                Bernard
                Well, they've only gone to the advert, so I've a moment. You're saying "SafeNet," are you? There's a firm near me called something like that — they did the gutters. Or the roofing. One of the two. Very reasonable, I think.
              
                Caller
                Gutters, sir? No — SafeNet Billing, the billing side of things, and this is a recorded support line. You've got a window of about five minutes before the damage becomes permanent, so I do need you listening to me.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Recorded, is it? I'll mind my manners. Oh — five minutes, you said. There's a chap due round the back about now and if I'm nattering he'll just turn on his heel. Give me a moment to think.
              
                Caller
                Let the chap wait, sir, he'll still be there — what won't be is your machine. Nobody sorts this from outside, so I'd be looking at your screen myself, through the line, if you'd just let me have a quiet look at it.
              
                  Remote access requestUrgency or fear
                
It pairs a ticking clock with a friendly offer of hands-on help, so the target feels rescued rather than robbed.
Real company: A real support team never asks to look at your screen through a phone line, and never rushes you off an existing call.

                Bernard
                Through the line? Like a television, that. Well, I'm not near it just now — I'm by the back step, and I'd have to go through to the front room. That door sticks in damp weather, so it's a job.
              
                Caller
                Then bring it through with you — not the door, the machine, before the warning buries itself deeper. Honestly, sir, I've run out of ways to put this, and my screen's gone blank on whether the ticket was the billing one or the other one.
              
                  Remote access requestUrgency or fearFake scan or planted problems
                
                Bernard
                Blank screen, oh dear — mine does that when the aerial's been knocked. Have you given it a thump? Not too hard, mind. My late wife swore by a thump.
              
                Caller
                Forget it. I'm putting the phone down now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →