Call #913 · 2026-10-28

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning screen with a phone number on it is not a message from the company, so never ring it and never let anyone reach into your machine.

“Bernard offered the step ladder for the reaching-in, and the caller decided the afternoon was better spent elsewhere.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

look never granted, caller gave it up, screen stayed red · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you're through to the screen alert team. You did the right thing ringing the number on the warning, so let's get that machine looked at.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
Praising the person for calling the number on the alert makes them feel smart and stops them questioning where that number came from.
Real company: A real security company never puts a phone number in a warning pop-up, and it does not cold-call people who ring it.

                Bernard
                Oh — well — now, that's a relief, someone to talk to. I've got this big red thing across the whole screen, and I can't get at my crossword. Is it meant to be red, dear? Only I'd have preferred a blue, something restful.
              
                Caller
                Red's never good, I'm afraid — that's the alert level rising. We need to act on this before the machine starts locking things off, so let's not lose time.
              
                  Urgency or fearFake pop-up with phone number
                
A rising threat level and a closing window make people act fast instead of checking.
Real company: A real security team explains the finding in writing and gives you time to verify it yourself.

                Bernard
                Locking things off, you say. Hmm. Oh — before I forget, would you like a cup of something? I'm putting the pot on regardless, it's no bother. Anyway. Is it like the front door, this locking? Only I've a habit of leaving that on the latch.
              
                Caller
                No, it's not the door, it's your files — and once they're held shut there's nothing I can do about it from this end. SafeNet Billing has seen this strain before, so let's move.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                SafeNet, is it? I had it down as SafeBelt, no matter. Hold on though — this biscuit tin's defeated me, the lid's welded itself shut, and my fingers aren't the strongest. Where were we, dear?
              
                Caller
                Names are neither here nor there — SafeNet Billing, the people on the warning. Now, what I'll need is for you to let me have a look at that machine directly, so I can clear the strain out myself.
              
                  Remote access requestFake authority or brand impersonation
                
Offering to fix the problem personally feels helpful, and a company name borrowed from the warning makes it sound official.
Real company: A real support team never asks to look inside your computer from an unexpected call, and would give you a number you can verify yourself.

                Bernard
                Have a look at it directly. Right you are. Well, it's on the sideboard, under the fruit bowl — the pears from the garden, they've gone on a bit, actually. Would you be able to see it from where you are, do you think?
              
                Caller
                No, that isn't how it works — I can't see through a phone line, that's rather the point of the warning on it. You'd have to arrange it so I can reach into the machine from my side, and that's a straightforward arrangement.
              
                  Remote access requestFake scan or planted problems
                
Offering to fix the problem from their side sounds helpful and technical, so the target hands over control without realising what it means.
Real company: A real support team never asks to reach into your computer from their side, and will tell you to open their official app yourself.

                Bernard
                Reach into it. Well, that's a job and a half. Are you tall, dear? I could fetch the step ladder.
              
                Caller
                Honestly, I don't know why I bother. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →