Call #848 · 2026-10-27

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives with a phone number to call is an advertisement, not a diagnosis.

“The caller wanted to look at the machine from his end, and Bernard asked whether the gate had creaked.”

Fake pop-up with phone numberUrgency or fearFake authority or brand impersonationFake scan or planted problemsRemote access request

line released, entry refused, no damage done · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you've reached the number from your screen. That warning you're looking at, sir, that's not a drill, so let's sort it before it spreads.
              
                  Fake pop-up with phone numberUrgency or fearFake authority or brand impersonation
                
It ties the call to something already on the victim's screen, so the warning feels real and personal.
Real company: A real security firm never puts a phone number in a warning pop-up and never cold-calls about it.

                Bernard
                Oh — well — now, that's a serious sort of voice you've got. Before it spreads to what, though? Only I've got a budgie next door that's learned the telephone, and I don't want him catching anything.
              
                Caller
                It spreads through the network, sir, that's the thing, to anything on the same line. So the longer that warning sits there, the worse your evening's going to get.
              
                  Urgency or fearFake pop-up with phone number
                
                Bernard
                Same line as the telephone? Because something's been at that all afternoon, ringing away. Anyway — before it spreads. Spreads to what, exactly? I've only the one machine and it's mostly for the crossword.
              
                Caller
                SafeNet Billing doesn't send these warnings out lightly, sir — we're the people the manufacturer points you to. So when it says infected on your screen, our system's reading the same thing from our end.
              
                  Fake authority or brand impersonationFake scan or planted problems
                
Claiming to be the official partner the manufacturer trusts borrows credibility the caller has not earned.
Real company: A real security company never cold-calls about a warning on your screen, and never claims a special partnership to sound official.

                Bernard
                SafeNet, is it? I had you down as Salford Billing, silly of me. And what's it reading at your end, this system? Does it need feeding, or does it just sit there? Only my machine sits there mostly too.
              
                Caller
                It reads activity, sir, and yours has got plenty. Let me just have a look at that machine from here and I'll tell you exactly what's got in.
              
                  Remote access requestFake scan or planted problems
                
Offering to look inside the machine feels helpful and technical, so the target hands over control instead of asking who is calling.
Real company: A real support team never takes remote control of your computer from an unexpected call. You call them, not the other way round.

                Bernard
                Have a look from there? You're not in the front room, are you? Only I'd have heard the gate. Hold on — the gate. No, that's the wind. Anyway, how do you look at a thing from a distance — like binoculars, or more like the radio?
              
                Caller
                Not binoculars, sir. If you let me into the machine from my end, I can see it properly — that's the only way to clean this out before it does real damage.
              
                  Remote access requestUrgency or fear
                
                Bernard
                Let you into it. Well. It's under the sewing table and there's a deal of clutter in the way. And what sort of damage are we talking about? Would it get into the toaster? Because that's the one thing I'd hate.
              
                Caller
                I'll get someone else to ring you. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →