Call #963 · 2026-10-28

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning screen with a phone number is bait. Real support never cold-calls you and never needs to get into your machine.

“The caller claimed the only authorised fix was a look inside the machine and was asked whether the bird next door had eaten.”

Fake pop-up with phone numberUrgency or fearFake scan or planted problemsFake authority or brand impersonationUnsolicited contactRemote access request

warning unaddressed, no remote entry, caller rang off first · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                You did the right thing ringing the number on the warning — that screen isn't going to clear itself, you know. Can you still see the message about the infection?
              
                  Fake pop-up with phone numberUrgency or fear
                
It praises the person for calling and hints the problem will worsen, so they feel they must keep going to fix it.
Real company: A real security company never puts a phone number in a warning pop-up and never asks you to call it.

                Bernard
                Oh — well — now. SafeBelt, did you say? And the screen's still there, yes, big as life, orange writing, all very dramatic. Though I'll tell you what's odd, my slipper's gone under the chair and I'm in no position to reach it without a bit of a to-do.
              
                Caller
                SafeNet, yes. Never mind the slipper for a moment — that orange warning means the infection's spreading while we talk, so we really need to sort it before it gets a hold of the whole machine.
              
                  Urgency or fearFake scan or planted problems
                
A ticking clock shuts down careful thinking, so the person acts fast to stop a threat that does not exist.
Real company: A real security firm never phones from a pop-up and never rushes you. It shows findings in writing and lets you verify them.

                Bernard
                Spreading, is it? Like the ivy along the back fence. Took me three summers to get that under control. You're not cold where you are, are you? Only it's turned a bit.
              
                Caller
                I'm quite warm where I am, thank you. Now, I'm from SafeNet Billing, and I'm the person authorised to deal with that warning — so could you tell me what it says at the bottom of the screen?
              
                  Fake authority or brand impersonationFake pop-up with phone numberUnsolicited contact
                
Claiming to be the authorised person for the warning makes the call feel like the official next step rather than a stranger's approach.
Real company: A real security firm does not phone you about a pop-up and ask you to read your screen aloud.

                Bernard
                Well now, you'd have to give me a moment to fetch my specs. They'll be on the dresser, or possibly in the biscuit tin — it's been that sort of morning. Did you say SafeBelt, or SafeNest? You're going a bit quiet on my left side.
              
                Caller
                SafeNet, and the line does go quiet on my end too. While you're fetching the — while you fetch them, I should say I'll need to get into your machine to clear the warning properly. It's the only authorised way.
              
                  Remote access requestFake authority or brand impersonationUrgency or fear
                
Asking to enter the machine sounds like a repair step, so the victim hands over control without realising it opens the door.
Real company: A real security firm never asks to remotely control your computer from an unexpected call. They tell you to contact support through their official number.

                Bernard
                Get into it? Oh — like a locksmith. We had one for the shed. You'd want to see the garden while you're at it, the honeysuckle's gone mad. Hold on, the budgie next door's doing the ringing noise again, it's picked the phone up right clever.
              
                Caller
                Never mind the bird, it's the warning on your screen I'm here about. If you let me have a look at the thing, I can get this cleared today — otherwise the machine's just going to sit there in a state.
              
                  Remote access requestUrgency or fearFake pop-up with phone number
                
                Bernard
                In a state, is it? Our old telly used to sulk like that. You'd give it a thump and off it'd go. Are you eating properly, though? You sound like you're on your feet all day.
              
                Caller
                Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →