Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1058 · 2026-10-29

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
4
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning on your screen did not come from a company, and no real support line asks to reach into your machine from their end.

“The billing division offered to reach the machine directly and was asked to look for a missing piece of sky.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

caller withdrew, no access granted, nothing taken · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, you've reached the number on your screen. That warning you're looking at, sir, it's about your machine.
Fake pop-up with phone numberFake authority or brand impersonation

The caller confirms the scary warning already on screen, so the victim believes the number and the problem are real.

Real company: A real security company never puts a phone number in a warning pop-up and never calls you about it.

Bernard Oh — well — now, is that the SafeNest people? That's a nice name for it. Hold on, my reading glasses are somewhere about my person. You said the screen, did you? The little laptop's over by the window, but there's a puzzle on it, half done since Easter.
Caller SafeNet Billing, yes. Leave the puzzle, sir, this is more pressing — that warning means your machine is compromised right now.
Urgency or fearFake authority or brand impersonation

A sudden threat of harm makes people act before they think, and a confident brand name makes the warning feel official.

Real company: A real security firm never cold-calls about a warning on your screen, and never tells you to drop what you are doing.

Bernard Compromised, you say? Well that does sound like my hearing aid more than the laptop. It whistles something dreadful when I cup my ear — the left one's the bad one, though I don't go on about it. Which ear did you say?
Caller The laptop, sir, not your ear. I'm from the billing division at SafeNet Billing, and that warning is an official notice — you need to deal with it now.
Fake authority or brand impersonationUrgency or fear
Bernard The billing lot, is it? I'm not sure I've ever had a bill from you. Mind you, my library book's three weeks overdue and I haven't dealt with that either, so you're in good company. Are you warm enough where you're sitting?
Caller SafeNet Billing doesn't send paper bills, sir, it's all handled through the machine. Which is exactly why I need you to let me have a look at it from my end.
Remote access requestFake authority or brand impersonation

It frames taking control of the computer as routine billing admin, so the request feels like a normal step rather than a handover of the machine.

Real company: A real billing department posts a bill or points you to your own account page, and never needs to look inside your computer.

Bernard Have a look at it from your end? Oh, that's clever. Is it the sort of thing that needs feeding, though? Only I had a neighbour's cat once that was all wires and wanted feeding twice a day.
Caller It's not a cat, sir, it's a fault report. I just need you to give me the go-ahead and I can reach your machine directly from here.
Remote access requestFake authority or brand impersonation
Bernard Ah, the go-ahead. Right you are. Hold on, there's a piece of my jigsaw gone missing since Easter, and I've a feeling it's gone under that very machine. If you can reach in, have a look for it — it's the bit with the sky on.
Caller I'll get someone else to ring you. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →