Call #953 · 2026-10-28

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that gives you a number to ring is advertising for the person who answers it.

“The caller asked to be let in through the line and was told the set had sat on the table since Tuesday.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

reference unread, line gone dead, caller still holding the device · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Evening, SafeNet Billing here — I understand there's a warning up on your screen and you've done the right thing ringing the number. Can you read me the reference it's showing?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
The caller treats the pop-up as real and praises the person for calling, which makes the warning feel official and the number feel correct.
Real company: A real company does not put a phone number in a warning pop-up and wait for you to call it.

                Bernard
                Evening to you. SafeNest, did you say? Now then — reference. There's a lot of red on it, and a sort of padlock. Would the reference be the big numbers or the squiggly little ones near the bottom?
              
                Caller
                SafeNet Billing, that's right. It's the big ones — and please do hurry, because while that warning sits there the machine is still exposed.
              
                  Urgency or fearFake pop-up with phone numberFake authority or brand impersonation
                
A ticking clock stops people from pausing to check whether the warning is real.
Real company: A real security firm never phones from a pop-up, and would let you verify the alert at your own pace.

                Bernard
                SafeNest, right, got it. Oh — hold on, I've left my good spectacles in the kitchen and I can hear the hob clicking. Won't be a tick. Back now. Where were we? You were going to tell me what it's all about.
              
                Caller
                You were reading me the big numbers off the warning. I'm from SafeNet Billing's technical team, so I'm the one authorised to clear this — but only once I've got that reference.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Technical team, very good. Well, the big number at the top — do you want the whole lot of it, or only the beginning bit?
              
                Caller
                The whole thing, top to bottom. And once I've got it, the quickest way to clear the warning is for me to take a look at your machine myself — just let me have access and we'll have it sorted.
              
                  Remote access requestFake scan or planted problems
                
Offering to fix the problem personally feels helpful, so the victim hands over control without questioning why a stranger needs it.
Real company: A real software company never asks to remotely control your computer from an unexpected call. It points you to its official support channels.

                Bernard
                Take a look yourself. Right you are. Only this thing's been sat on the table since Tuesday and I don't rightly know where you'd plug into it. Do you want me to hold it up to the window so you can see it better?
              
                Caller
                No, no — you don't hold it anywhere. There's a way for me to come through the line to it, and then I just need you to let me in when I ask. That's the part I still need.
              
                  Remote access requestFake scan or planted problems
                
                Bernard
                Through the line, is it. That's clever. We had a man round once who mended the telly by hitting it, and my sister said it was all done by wires. Anyway. You'll want the number first, won't you.
              
                Caller
                I'll get someone else to ring you. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →