Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1018 · 2026-10-29

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning on your screen is not a person. Real support does not ring you about a pop-up or rush you off the phone.

“The warning was said to be the last notice, and Bernard asked how difficult difficult was.”

Fake pop-up with phone numberUrgency or fearFake authority or brand impersonationRemote access requestFake scan or planted problems

alarm raised, dinner declined, caller rang off · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, you're through to the support line for the warning on your screen. That's a serious alert you've got sitting there, so let's deal with it before it gets worse.
Fake pop-up with phone numberUrgency or fearFake authority or brand impersonation

The caller treats the pop-up as already proven and adds a ticking clock, so the person focuses on fixing the warning instead of questioning it.

Real company: A real security company never puts a phone number in a warning pop-up, and never calls you about it.

Bernard Oh — well — now, Sunshine Billing, is it? I've got something up here, yes, all red and shouting. But it's Thursday, isn't it, so I wasn't expecting visitors. Are you anywhere near a window, dear? It's turned out lovely.
Caller It's not a visit, it's a warning, and the day doesn't come into it. Every minute that screen stays up, the worse it gets for you.
Urgency or fearFake pop-up with phone number
Bernard Every minute, you say. Hmm. Only I had it down as Wednesday, and I'm fairly sure the bins went out yesterday, so somebody's got their days muddled. Anyway, you'll want to know the machine's been like that since Sunday and it's not done a thing.
Caller I'm not here to argue about calendars — it's Thursday, if it matters, and that screen is telling you the whole machine's compromised. I'm the only one who can clear it.
Fake authority or brand impersonationUrgency or fear
Bernard Right you are. Have you had your dinner, dear? You sound like a man who's been sat in one spot since morning, and that's no good to anybody.
Caller I've not, no — listen, I just need a few minutes with the machine and then I'm out of your way. It's an authorised support session, straight from SafeNet Billing.
Remote access requestFake authority or brand impersonation

Asking for a few minutes sounds small and reasonable, so the target agrees before understanding what access means.

Real company: A real company never takes control of your device from an unexpected call. It gives you a number to call back.

Bernard A few minutes, right. Well, I'll just let Mavis out — she's been giving me that look. You're very welcome to wait, the radio's on in the front room.
Caller No, no, don't wander off — that warning won't sit and wait while the dial's being fiddled with. This is the actual billing system flagging your machine, and it's the last notice before things get properly difficult.
Urgency or fearFake scan or planted problemsRemote access request

It creates a deadline and hints at worse consequences, so the person acts before thinking it through.

Real company: A real company never phones about a warning on your screen and never pressures you to act right now.

Bernard Difficult how? Only I had one of those notices about my telly licence and it turned out to be nothing at all, so I do tend to let these things blow over.
Caller Honestly, I don't know why I bother. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →