Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1078 · 2026-10-29

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning on your screen is not a phone call, and no real support line needs to look inside your machine from their end.

“Nothing was installed, nothing was paid, and the call went nowhere.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

window refused, latch unopened, caller left to his pan · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing here, you're through to the support line — I understand you've got a warning up on your screen right now. Is that the laptop in front of you?
Fake pop-up with phone numberFake authority or brand impersonation

The caller confirms a scary warning the person is already staring at, so the call feels like a rescue rather than a cold approach.

Real company: A real software or billing company does not call you off a pop-up. You contact them through a number you look up yourself.

Bernard Oh — well — now, is that the SafeNest people? I've got the machine open on the sideboard, but it's showing a great orange thing. Hang on, is this about the fence? Only my neighbour's cat has been through it again.
Caller No, no, nothing to do with the fence or the cat — forget all that. The orange thing is the warning, and it means your machine is compromised right this moment, so we need to act before it spreads.
Urgency or fearFake scan or planted problems

It reframes a harmless image as an active threat, so the listener feels danger and stops thinking clearly.

Real company: A real security team never diagnoses a machine from a picture on a screen and never rushes you to act in seconds.

Bernard Compromised. Right. Oh — before it spreads. Well, I'll tell you what, my glasses have gone missing again, so I'm squinting at it. It says something about ringing a number. Is this the number? Are you warm enough where you are?
Caller Don't trouble yourself with the glasses — SafeNet Billing, that's us, and the number on the screen is the correct one. The warning's serious, though, and it won't wait about.
Fake authority or brand impersonationUrgency or fear
Bernard SafeNest, yes, that's what I said. And it won't wait — well, nothing does, does it. Now, should I be doing something, or should I just leave it sitting there? Only I've got a pan on and I don't want it catching.
Caller Leave the pan a moment, this matters more — what I need is for you to let me have a look at the machine from my end, so we can clear the warning off it.
Remote access requestUrgency or fearFake scan or planted problems

Asking to look at the machine sounds like helping, and the urgency pushes the person past the question of who is really asking.

Real company: A real software or security company never asks to connect to your computer after a warning pops up, and would tell you to contact them through official channels.

Bernard Have a look from your end — oh, like a window into it. I'd have to get the thing shifted, there's a fern sat on top and a whole pile of post. Is it a long job? You'd be waiting on me, I'm afraid.
Caller Not long at all, that's the beauty of it — you just let me in and I'll do the looking, you needn't shift a thing. So if you'll just open the machine up to me, we'll get this over with.
Remote access requestUrgency or fear
Bernard Let you in — oh, like a door on the latch. I had a man round about the gutters and he was in and out all afternoon. What was it you said your firm was called?
Caller I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →