Call #993 · 2026-10-28

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Pop-Up with a Phone Number

A warning that appears on your screen and carries a number to ring is not a warning, it is an advert for a phone call.

“The screen was reported to be in the cupboard, and the urgency went off to find its lunch.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

look requested, knees consulted, cupboard untouched, caller released · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                SafeNet Billing support, you've reached the number on the warning — is that the screen in front of you now?
              
                  Fake pop-up with phone numberFake authority or brand impersonation
                
It confirms the caller matches the scary warning, so the target believes the pop-up and the voice are one trusted system.
Real company: A real company never puts a phone number on a warning screen and calls you from it. You call them using a number you look up yourself.

                Bernard
                Oh — hello there. Yes, I'm looking at it, though I can't read a word without my glasses. I've had them on my head this whole time, would you believe. SafeNest, did you say? That's a nice name — is that the nest as in birds?
              
                Caller
                SafeNet, with a T. And there's no time for the glasses, sir — that warning means the infection is spreading as we speak, so I do need you to focus on it right now.
              
                  Urgency or fearFake authority or brand impersonation
                
A ticking clock shuts down careful thinking, so the person acts fast to stop a threat that is not real.
Real company: A real security firm never rushes you on a cold call and is happy to let you verify them through official channels.

                Bernard
                Spreading, is it? That sounds like the moss in the back garden, it's been spreading something dreadful since the rain. Have you eaten today? You sound like a man who's skipped his lunch.
              
                Caller
                I'll eat when I've closed this out, sir. SafeNet Billing doesn't ring people for the pleasure of it — that warning came straight from our end, so it's a serious matter.
              
                  Fake authority or brand impersonationUrgency or fear
                
                Bernard
                Well, I'm sure it is. Hold on a moment, will you — my library book is three weeks overdue and I've just spotted it under the telephone table. I'll be right back.
              
                Caller
                Take the book off your mind, sir, this is a far bigger thing than a library. On that warning is a support line — that's the one you rang — and now I need you to let me have a look at the machine from here.
              
                  Remote access requestFake pop-up with phone numberUrgency or fear
                
He brushes aside Bernard's real concern and reframes the problem as urgent and technical, so handing over control feels like the sensible next step.
Real company: A real support team never takes remote control of your device from a number printed on a warning screen. They would tell you to contact them through their official website.

                Bernard
                Let me have a look at the machine, you say. Oh — well — now, which machine is that? I've got the radio in the front room and a very old wireless in the kitchen. There's a lot of dials on that one.
              
                Caller
                The laptop, sir, the one the warning is sitting on. SafeNet Billing's own screen is on it, so there can't be much doubt which machine I mean.
              
                  Remote access requestFake pop-up with phone numberFake authority or brand impersonation
                
                Bernard
                Oh, the little flat one. That's been in the cupboard since Easter. You'd need to fetch it out and I'm not sure my knees are up to it today. Are you keeping warm where you are?
              
                Caller
                I'll ring you back another day. Bye now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →