Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1033 · 2026-10-29

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that arrives on your own screen and carries a phone number is a trap, not a message from a real company.

“The caller asked to look at the machine and was told no, twice, and then the caller was gone.”

Fake pop-up with phone numberUrgency or fearFake authority or brand impersonationRemote access requestFake scan or planted problems

no access granted, caller left first · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, you've reached the number on the warning. Is this the householder? The message on your screen is flagged as urgent, so I need to speak to whoever is at that machine.
Fake pop-up with phone numberUrgency or fearFake authority or brand impersonation

The caller treats the pop-up as already proven, so the person believes the problem is real and the call is the fix.

Real company: A real security warning tells you to close the window and contact support through the company's own published number, never a number shown on screen.

Bernard Oh — hello there. Yes, that's me, I'm the one at the machine, though I'll be honest, I've been sat here since about eleven and the day's got away from me entirely. Is this about the — what did you call it, Salford Billing?
Caller SafeNet Billing. And yes, it's about the warning on your screen — that one's not a decoration, it means the machine is compromised right now, this minute. Are you looking at it as we speak?
Urgency or fearFake pop-up with phone numberFake authority or brand impersonation
Bernard Salford, that's the one. Well I'm looking at the screen but there's a big red thing taking up the whole of it, so I can't see much else. Hold on — is it Tuesday today? Only I've had it down as Thursday since breakfast.
Caller It's neither, the day isn't the issue — the red thing is. That warning is our security division flagging your machine, and it's got a reference on it that I need to verify with you.
Fake authority or brand impersonationUrgency or fear
Bernard Oh, I see. Well, the red thing's got a lot of little numbers on it and I haven't got my glasses on. There's a lot of fuss about a red page though, isn't there. Are you warm enough where you're sat?
Caller Actually the best way to sort this is for me to look at the machine myself — if you just let me have access to it, I can clear the flag from my end and you can get on with your day.
Remote access requestFake scan or planted problems

Offering to fix the problem personally feels helpful and saves effort, so the target hands over control without questioning it.

Real company: A real support team never takes remote control of your device from an unexpected call, and would point you to official contact channels.

Bernard Let me have access to it — oh, I don't know about that. My cousin, the one who sold insurance, he'd have had something to say about letting people look at your things. He was very particular. Was it insurance? No, it was something else.
Caller Your cousin had the right instincts, but this is different — I'm on the billing side of SafeNet, and without access I can't confirm the warning is even genuine. It might not be mine to clear, and then where are we?
Remote access requestFake authority or brand impersonationUrgency or fear
Bernard SafeNet, that's it. Well — hold on. Is it SafeNet or SafeNest? Only my neighbour's got a nest of something in her hedge and she's forever going on about it. Anyway. Where are we? I'm not sure I follow.
Caller Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →