Call #983 · 2026-10-28

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that arrives with a number to call is the scam, so call the company yourself on a number you already know.

“He asked to be let into the machine remotely and was told the hob was boiling over, which was true.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problemsUnsolicited contact

a look requested, a hob answered, nothing given · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing, you've reached the number on the warning. That full-screen message on your laptop, that's why I'm calling — you're seeing it right now, aren't you?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It treats the scary screen as proof of a real problem, so the target believes the caller already knows about it.
Real company: A real company never cold-calls you from a number shown in a pop-up, and never treats a screen message as proof of anything.

                Bernard
                Oh — well — I'm seeing something, yes. Great block of red, and a sort of shield. I don't know if it's the telly or the machine. I've got a letter from the council here I meant to open in March. Should I open that first, do you think?
              
                Caller
                The letter can be whatever it is, but that red screen won't sit there politely. Every minute it stays up, the worse it gets, so let's deal with it now.
              
                  Urgency or fearFake pop-up with phone number
                
A ticking clock shuts down thinking, so the person acts on the warning instead of questioning it.
Real company: A real security warning tells you what happened and lets you take your time, and it never pushes you to act this second.

                Bernard
                Every minute, is it? Well, that's the thing about March — I'm still catching up on it. It's the council, you see, about the bins. Do you know what colour the bins are where they are? Ours changed and I've not got used to it.
              
                Caller
                I couldn't tell you about bins, I'm billing, not waste. The screen, though — the shield on it, that's our mark, that's how you know it's genuinely us.
              
                  Fake authority or brand impersonation
                
                Bernard
                A little badge, then, was it? I'd have to fetch my glasses to tell you what it says. They're in the kitchen and something's on the hob, so give me a moment.
              
                Caller
                Leave the hob, the badge will still be there when you get back — that mark means our own engineers flagged your machine. Now, to look at what's happened, I'd need to be in there with you.
              
                  Remote access requestFake scan or planted problemsUrgency or fear
                
It pairs a calm, friendly tone with a claim that the problem is already confirmed, so the victim feels the decision is made for them.
Real company: A real IT team never asks to connect into your machine from an unexpected call. They use scheduled support you requested yourself.

                Bernard
                In with me? Like a visitor. Will I put the pot on for you? It's only the one bag left, mind, but I can stretch it.
              
                Caller
                No pot, no — I mean in the machine, remotely. If you just let me have a look at it from my end, I can see straight away what's going on.
              
                  Remote access requestFake scan or planted problemsUnsolicited contact
                
Offering to look inside the machine feels like free expert help, so the victim lowers their guard and hands over control.
Real company: A real support team never takes remote control of your device from a cold call, and would point you to official contact details.

                Bernard
                Oh, you're one of those. My nephew does that, watching my telly from his flat. I'll leave you to it, then — the hob's boiling over.
              
                Caller
                Honestly, I don't know why I bother. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →