Call #823 · 2026-10-27

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives by itself and comes with a number to call is not a warning, it is the advert.

“The caller offered to reach through the line and move the warning himself, and Bernard offered to put the phone down and see to the hob.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearUnsolicited contactRemote access request

no screen shared, no warning shifted, he was let go · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the support line — is that the warning on your screen you're calling about?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller opens by naming a problem the person is already staring at, so the call feels like a reply rather than a cold approach.
Real company: A real company does not run a phone line printed on a browser warning, and never calls you about a pop-up.

                Bernard
                Oh — hello there. Yes, there's a big red thing taken over the whole picture, and the little radio play's gone quiet underneath it. Was it SafeBelt you said? Only I had a belt come apart once, and that was the end of that.
              
                Caller
                SafeNet Billing, yes — and that red screen means the thing's already spreading, so we really don't have long. Is the laptop still on?
              
                  Urgency or fearFake pop-up with phone numberFake authority or brand impersonation
                
A scary warning plus a ticking clock pushes people to act before they think to check whether any of it is real.
Real company: A real security firm never cold-calls about a warning on your screen, and never rushes you.

                Bernard
                Spreading, is it? Well, I've got a bit of a wait on anyway, the potatoes aren't anywhere near ready. It is on, yes — it's the one by the window. Would it help if I turned the radio up instead?
              
                Caller
                Sir, listen — SafeNet Billing is the authorized support for that system, so that screen isn't going to clear itself. Can I just get you to look at the numbers shown on it?
              
                  Fake authority or brand impersonationUnsolicited contact
                
Claiming official authority makes people stop questioning and start obeying the person on the line.
Real company: A real company never phones you from a pop-up and never needs you to read numbers off your screen.

                Bernard
                Numbers? Hold on, I'll need my glasses — they were on top of the crossword. And you said SafeBelt again, didn't you? It's a funny name for a computer firm, I must say.
              
                Caller
                It's SafeNet Billing, and it's on the warning itself if you squint at it. Now — if you'd let me have a proper look at the machine from here, I can shift the warning off it myself.
              
                  Remote access requestFake authority or brand impersonation
                
Offering to fix the problem personally feels helpful, so the victim hands over control instead of questioning who is calling.
Real company: A real software or billing company never asks to connect into your computer from an unexpected call. It points you to official support channels.

                Bernard
                From there? How would you do that, then — through the wires? I'm not sure the fella who set it up would like it. He's coming back anyway, I think it was a Tuesday. Or a Thursday.
              
                Caller
                Through the line, yes, that's the usual way — I just need you to let me have a look and I'll take it from there. Honestly, it's the simplest thing.
              
                  Remote access request
                
                Bernard
                Oh, I see. Well, I'm not much good at that sort of thing. Would you like me to leave you to it and pop the phone down for a tick? I've got something on the hob that's making a funny noise.
              
                Caller
                Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →