Call #883 · 2026-10-27

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A pop-up with a phone number is not a company warning you, it is an advert for a stranger to get into your computer.

“Nothing was installed, nothing was paid, and the call went nowhere.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsTold to keep it secretRemote access requestUnsolicited contact

connection never made, caller gave up first · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the billing support line — is that the warning on your screen you're ringing about?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
A calm, official-sounding greeting makes the call feel like a normal support line the person chose to ring.
Real company: A real company does not put a phone number in a browser warning and wait for you to call it.

                Bernard
                Oh — the billing, yes. Well, the whole screen's gone orange, which is a bit much on a Tuesday. Hold on, my hearing aid's whistling at me — there we are. Now, do you lot do that in a different colour, or is orange the only one?
              
                Caller
                Orange is just the warning setting, sir, and it's flashing because the infection's spreading to your other devices as we speak — every minute it sits there, more of your files go. So we do need to deal with it right now, while there's still something to save.
              
                  Urgency or fearFake scan or planted problems
                
A ticking clock and the threat of losing files pushes people to act before they can think or check.
Real company: A real security team explains the issue in writing and gives you time to verify it through official channels.

                Bernard
                Spreading? Oh dear. I've only the one machine, mind — unless you count the radio in the front room, and that's never done anybody any harm. Would you like a cup of tea while I have a think? I've just put the pot on.
              
                Caller
                No, no tea, thank you — I'm on the clock. The point is your safety, sir, and SafeNet Billing is the only outfit authorised to clear this warning, so if anyone else rings about it, don't touch it. Now, about that machine of yours.
              
                  Fake authority or brand impersonationUrgency or fearTold to keep it secret
                
Claiming to be the only authorised fixer makes Bernard afraid to check with anyone else.
Real company: A real company never claims to be the only one allowed to help, and never tells you to ignore other callers.

                Bernard
                SafeNet — that's the one. Right, well, it's a greyish sort of laptop, if that helps. My nephew picked it out, he's the technical one, though he gets my birthday wrong every year. What was it you wanted me to do with it?
              
                Caller
                What I need is for you to let me look at it from my end — just a simple session where I take the reins and the warning's gone in a few minutes. Shall we get that going?
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
Offering to take control feels like a quick fix, and the ticking clock stops anyone pausing to ask who is really on the line.
Real company: A real security team never asks to control your computer from an unexpected call, and will point you to support you contact yourself.

                Bernard
                Let me just get the thing out of the drawer, it lives in the sideboard and the handle sticks. There. Now, "take the reins" — is that like when the man comes to read the meter? Because he just stands there and I make him a cup of tea.
              
                Caller
                No, not the meter man — I'd be working on your machine from where I'm sitting, through this line. You'd only have to let me in at your end.
              
                  Remote access requestUnsolicited contactFake authority or brand impersonation
                
It reframes taking control of the computer as a small favour the person only has to allow, making intrusion feel like cooperation.
Real company: A real support team never takes remote control from a cold call, and will point you to official contact details you look up yourself.

                Bernard
                Oh, through the line, like the weather on the radio. Well, wouldn't that need feeding? Only my nephew's got one of those plugs that runs off the wall and it gets warm if you leave it.
              
                Caller
                I'll get someone else to ring you. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →