Call #938 · 2026-10-28

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that appears on your screen with a number to ring is not a warning, it is an advert, and the number belongs to whoever wrote it.

“The program was described, the takeover was proposed, and the machine stayed exactly where it was, on a table with no room on it.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

screen warning went unaddressed, caller's glasses stayed lost · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you've reached the number that was on your screen — that full-screen warning, the red one. You did the right thing ringing it.
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It rewards the person for calling and treats the scary screen as real, so they stop doubting it.
Real company: A real security firm never puts a phone number on a warning screen and never needs you to call it.

                Bernard
                Oh, the red one — well, that's a relief, I thought the set had gone funny again. Are you warm enough, wherever you're sitting? It's turned bitter out. I've got a photograph here I've been meaning to tell somebody about.
              
                Caller
                That's kind of you. The warning says the machine is at risk right now though, so before anything else, we need to deal with that.
              
                  Urgency or fearFake pop-up with phone number
                
A vague warning of immediate danger pushes the person to act fast before they can think or check.
Real company: A real security team states the specific problem plainly and never rushes you past your own questions.

                Bernard
                At risk — is it? Right you are. Only I've got this tin of biscuits, the lid's on a bit tight, and I can't manage it one-handed. You don't mind if I see to it while we talk?
              
                Caller
                SafeNet Billing deal with these warnings all day, so you're in proper hands — just keep your eyes on the screen for me. Does it say the number on it, near the bottom?
              
                  Fake authority or brand impersonationFake pop-up with phone number
                
                Bernard
                Safebelt, is it? Funny sort of name. The number's down at the bottom, aye. Hold on a moment — something's got its beak in my sleeve.
              
                Caller
                SafeNet Billing, that's right. Now, what I'll need is for you to let me have a look at the machine from my end — just a small thing to put on it so I can see the same warning you're seeing.
              
                  Remote access requestFake authority or brand impersonation
                
Asking to see the same screen sounds like a small favour, so the victim agrees before thinking about what access really means.
Real company: A real software or billing company never asks to install anything to view your screen, and would point you to its official support page.

                Bernard
                Put a thing on it — well, I'd have to find my glasses first, and I've not the faintest where they've got to. They turn up in the strangest places. What would this thing look like? Would it be any particular colour?
              
                Caller
                It's not a colour thing, it's more a little program — look, forget the glasses. If you just let me take the machine over for a minute, I can check it without you doing a thing.
              
                  Remote access request
                
                Bernard
                Take it over? Where would it go, though? There's not a lot of room on that table, and the parrot's got her spot at the back and she's not shifting for anyone, I shouldn't wonder.
              
                Caller
                I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →