Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1108 · 2026-10-30

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
6
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that arrives with a phone number attached is a sales pitch, not a diagnosis, and the fix is to hang up.

“The line offered to come down the wire and was asked whether there was a door in the side of it.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problemsUnsolicited contact

no door found, no wire followed, line gave up first · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing support, you're through to the pop-up team. That warning on your screen, sir, that's why I'm calling — before anything else happens, I need you to stay right where you are.
Fake pop-up with phone numberFake authority or brand impersonationUrgency or fear

A scary warning on screen plus a calm voice claiming to be the fix makes the victim trust the caller instead of the computer.

Real company: A real security company never phones you because of a pop-up. You would call the number printed on your own software or bank card.

Bernard Oh — well — now, that's a relief, I was just staring at the thing. SafeNest, did you say? Lovely name. Now, do you mind if I ask — am I meant to be frightened by it, or just mildly put out?
Caller It's SafeNet, and frightened is about right, sir, honestly — that warning means the machine's compromised and the clock's ticking. So let's not get comfortable, we need to deal with it now.
Urgency or fearFake authority or brand impersonation
Bernard Ticking, is it? Well, I've got a clock in the hall that does that and I've never once worried about it. Funny. Now — hold on, I've a letter from the council here somewhere I've been meaning to open. Is that likely to be anything to do with it?
Caller No, sir, the council's nothing to do with me — SafeNet Billing, that's who you're speaking to, dealing with the warning on your screen. That letter can wait; this can't.
Fake authority or brand impersonationUrgency or fear
Bernard Oh, everything can wait in this house, I've found. The letter's been there since Tuesday, so another hour won't hurt it. Now then — do you want me to describe the warning to you, or can you see it from where you are? Only I'm never sure how these things work.
Caller I can see it, sir, that's rather the point of us getting in touch. But seeing isn't fixing — what I need is to have a proper look at the machine myself, so we'll get you to let me onto it, and I'll take it from there.
Remote access requestFake scan or planted problems

He reframes the pop-up as proof of a real problem, so letting him in feels like the obvious next step rather than a favour.

Real company: A real security team never asks to connect to your computer from an unexpected call. You call them on a number you looked up yourself.

Bernard Let you onto it — right you are. Now, does that mean you'd be sitting here in the room, or is it more of a long-distance arrangement? Only I'd want to put the good cups out if you were coming. And the cat's fond of that chair.
Caller Long-distance, sir, that's the whole idea — no cups and no cat, just a bit of a look at the machine from my end. It'll take me two minutes if you'll let me get to it.
Remote access requestUnsolicited contact

Asking to 'take a look' sounds like routine help, so the victim hands over control of their own computer without realising what that allows.

Real company: A real support team never takes remote control of your machine from a cold call. You call them, through the number on your bill or their official site.

Bernard Two minutes — well, that's quicker than the wireless takes to warm up. But I'm blowed if I know how you'd get in. Is there a door in the side of it, or do you come down the wire? I've never understood it, honestly.
Caller I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →