Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1113 · 2026-10-30

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
6
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that arrives with a number to call is the warning calling you, so no real support line will ever ask to take over your screen.

“The line asked to be let in through the screen and was asked whether it was eating properly instead.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsUnsolicited contactRemote access request

screen never surrendered, script never landed, caller still on the phone · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Good afternoon, SafeNet Billing support here — you've reached the number that's showing on your screen. Now, that warning in front of you, I can see the same thing at my end, so let's take a proper look at it together.
Fake pop-up with phone numberFake authority or brand impersonation

The caller confirms the number on the screen, so the warning feels connected to a real support line.

Real company: A real security company never puts a phone number in a warning pop-up and never calls you about it.

Bernard Oh — well — now, you can see it too? That's clever. SafeNest, did you say? There was a programme about lighthouses on in 1987, I still think about it, and the screen went all stripey over the top of it. Would your lot have anything to do with that?
Caller SafeNet, yes — and the stripes are exactly the sort of thing I mean. That warning's been sitting on your machine spreading for a while now, so we really do need to move on it.
Urgency or fearFake scan or planted problemsFake authority or brand impersonation

It invents a spreading threat and a ticking clock so the person acts before they can think or check.

Real company: A real security firm never cold-calls about a warning on your screen, and it never rushes you to act.

Bernard Spreading, is it. Hmm. Now, before any of that — are you eating properly? You sound like someone who's had a long day on the telephone. I've one slipper gone right under the chair and I'm not shifting till I've had a word with you about it.
Caller The slipper can wait, honestly — this is SafeNet Billing and I'm the only one who can deal with the warning. It's on your machine, it's getting worse by the minute, and we should sort it now.
Fake authority or brand impersonationUrgency or fearUnsolicited contact

A named brand plus a ticking clock makes people hand over control before they stop to check who is really calling.

Real company: A real security company never cold-calls about a warning on your machine, and never claims to be the only one who can fix it.

Bernard Well, mine's a cup of tea going cold and I can't find the other one under there. Sorry — your what? SafeNet, yes. Do you want me to go and have a proper look at this warning, or shall I tell you about the lighthouse first?
Caller The warning, please — leave the lighthouse. I can fix it from here, but only if you let me have a look at your machine through mine; just say the word and I'll be in.
Remote access requestFake scan or planted problemsUrgency or fear

Offering to fix a problem he invented makes him seem helpful, and asking permission makes it feel like your choice.

Real company: A real software company never asks to connect into your computer from an unexpected call. You contact them, not the reverse.

Bernard In through it, you mean. I'd not know where to start with that. Is it the screen you're after, or the little light that blinks on the box?
Caller The screen's the thing. You don't need to touch anything, just let me take it over from my end and I'll clear this up in no time — that's the whole idea.
Remote access requestFake scan or planted problems
Bernard Sorry — was it you that rang about the other thing?
Caller I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →