Call #903 · 2026-10-27

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A real company cannot see anything on your screen unless you tell it what is there, so a caller who already knows is guessing.

“The caller was authorised to look and Bernard offered a college boy instead, so the line decided to behave itself later.”

Fake pop-up with phone numberUnsolicited contactUrgency or fearFake authority or brand impersonationRemote access requestFake scan or planted problems

authority claimed, access never granted, caller hung up · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                It's ringing, it's ringing, you picked up — good. That warning on your screen, the red one, I'm the person for that, so before we go any further I just need you to look at it and tell me what it says.
              
                  Fake pop-up with phone numberUnsolicited contact
                
A scary warning plus a helpful voice on the line makes the screen feel like a real emergency with a ready-made rescuer.
Real company: A real software company never puts a phone number in a warning and never calls you about it.

                Bernard
                Oh — well — now, that's a big red thing, isn't it. I've got a photograph here I've been meaning to tell somebody about, my niece on a donkey, and she's got the same sort of red hat on as your warning. Hold on, is it SafeNest or SafeNet?
              
                Caller
                SafeNet, SafeNet Billing, and the hat's neither here nor there. That red thing on your screen means the machine's in trouble right now, this minute — so what's it saying?
              
                  Urgency or fearFake pop-up with phone number
                
A sudden alarm about the machine pushes the person to act fast instead of stopping to check whether the warning is real.
Real company: A real security company never phones about a pop-up, and real warnings tell you to open the software yourself.

                Bernard
                In trouble, is it. Well, it's very red, I'll give you that. I can't read it without my glasses and they've gone somewhere sensible of their own accord. Would you be warm enough sitting there, wherever you are?
              
                Caller
                Not really the point, is it. Look, I'm ringing on behalf of the billing side at SafeNet, and the warning's only going to get worse the longer that stays up there — so someone in that house needs to look at it properly.
              
                  Fake authority or brand impersonationUrgency or fear
                
A named company and a ticking clock make the warning feel official and time-sensitive, so people act before checking.
Real company: A real security firm never cold-calls about a warning on your screen, and would point you to its official support page.

                Bernard
                Oh, there's only me in the house, apart from the bird. She won't look at it, she's got no patience for screens. Worse, you say — worse how? Does it make a noise, because I've had the radio on low and I don't want a racket.
              
                Caller
                It's not a racket, it's a matter of the billing records and the warning both pointing at the same thing. Now, is anyone there who can actually get onto that machine for me, because I can't do a thing from this end.
              
                  Remote access requestFake scan or planted problems
                
Asking who can get onto the machine reframes a request for access as routine help, so the victim offers it themselves.
Real company: A real support team never needs a stranger to take control of your computer, and would tell you to call the number on your bill.

                Bernard
                Billing records. Now that reminds me, I had a bill for something last month I meant to query, but I've put it somewhere. Was it the photograph fellow — no, that's not right, it was the window cleaner. Anyway. The red thing's still up, if that helps.
              
                Caller
                It doesn't really help, no. I'm authorised from SafeNet to sort this out, and I just need whoever's at that machine to let me look at it — that's all.
              
                  Remote access requestFake authority or brand impersonation
                
                Bernard
                Oh, look at it. Well, I can't stop you looking, I suppose, but it's my neighbour's boy who does all that. He's back at college next week. Shall I get him to ring you, or is that a lot of fuss?
              
                Caller
                I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →