Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #108 · 2026-10-19

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

15
Minutes wasted
4
Red flags found
10
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A pop-up that gives you a phone number is not a warning from a real company, and no support team needs to be let onto your machine to clear it.

“The caller asked to be let onto the machine. The machine was never found.”

Fake pop-up with phone numberUrgency or fearFake authority or brand impersonationRemote access request

nothing gained, kettle unboiled · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, good afternoon. You're through about the warning on your screen — I can see it's still showing, so let's get that sorted before it does any damage.
Fake pop-up with phone numberUrgency or fearFake authority or brand impersonation

It treats a scary pop-up as real and offers to fix it, so the person feels relief and stops questioning.

Real company: A real security firm never calls you about a pop-up. You contact them through a number you look up yourself.

Bernard Oh — well — now. Which one are you from, dear? Sniffnet, was it? The screen's gone a bit blue and Mavis has taken against it, she's been squawking at it since half past two. Is this about the insurance? My cousin sold insurance, you know.
Caller SafeNet Billing, sir, not Sniffnet, and not insurance. Whatever's on your screen is still active and it's only getting worse the longer it sits there, so let's not leave it.
Urgency or fearFake pop-up with phone number

It pushes the person to act fast so they skip checking whether the warning is even real.

Real company: A real security company never calls from a pop-up and never rushes you to act before you can verify.

Bernard Sniffnet, right, got it. Sorry, my left ear's a bit — anyway. You said it's getting worse, did you? Only I was just about to put the kettle on. Would you like a cup of tea while we sort it? I can't offer you a biscuit, they've gone a bit soft.
Caller That's very kind but I can't drink tea down a phone. Sir, I'm from SafeNet Billing's support team, and the alert on your machine has to be dealt with today — I really would leave the kettle.
Fake authority or brand impersonationUrgency or fear

A calm, friendly tone plus a made-up job title makes the caller sound official and hard to doubt.

Real company: A real company never phones out of the blue about an alert on your machine, and never pushes you to act today.

Bernard Can't drink tea down a phone — that's a shame, that is. Oh, hold on. Sorry, dear, the budgie next door's been doing the ringing sound, it's a proper menace. What was it you wanted doing with the screen? I've got my glasses somewhere.
Caller It's the budgie, fine, but listen — I need to have a look at your machine from here to clear it, so I'll just need you to let me onto it. It's the only way to stop the alert spreading.
Remote access requestUrgency or fear

Offering to fix the problem personally creates trust and makes handing over control feel like the helpful next step.

Real company: A real support team never asks to connect to your computer from an unexpected call. You call them using a number you look up yourself.

Bernard Let you onto it — right you are. Well, I'd have to find the thing first. Is it a sort of — oh, hold on, was it Tuesday you said? My cousin used to say the same about his policies, very keen on getting in.
Caller Not Tuesday, sir, and not insurance. SafeNet Billing, support — I just need you to let me onto the machine so I can see the warning, that's all I'm after.
Remote access requestFake authority or brand impersonation

Asking to connect to the computer feels like a small favour, so the victim focuses on helping rather than on what access really means.

Real company: A real support team never asks to connect to your computer from a cold call, and would tell you to contact them through official channels.

Bernard Oh, I see, you can see it from your end. That's clever, that is. Would it be all right if I put you on hold for half a tick? Mavis has gone quiet and that usually means the curtains.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →