Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1133 · 2026-10-30

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that tells you to ring a number is not a warning, it is an advert, and a real support line never needs to look after your network before you have agreed it exists.

“He did not remember signing anything, asked whether the account was assumed like a licence, and the caller rang off.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

customer status denied, network never reached, agent closed the call · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing support, thank you for calling. I understand there's a warning showing on your screen — that's why you rang, isn't it?
Fake pop-up with phone numberFake authority or brand impersonation

It confirms the scary warning is real and frames the call as the victim's own idea, which lowers their guard.

Real company: A real security firm does not run a phone line printed on a browser warning, and does not treat a pop-up as proof of a problem.

Bernard Oh — hello there. Well, I rang the number on the screen, the big red one, because it wouldn't go away. Now, is that SafeNest or SafeNet? Only my nephew does something with nests.
Caller SafeNet, sir, with a T. And that warning means your machine is in real danger right this moment — every minute you leave it, the thing spreads.
Urgency or fearFake pop-up with phone number

A ticking clock shuts down careful thinking, so the target acts fast to stop a threat that does not exist.

Real company: A real security firm never phones from a pop-up warning, and it gives you time to verify the alert yourself.

Bernard SafeNett. Right you are. Oh, it's been blinking at me since about half nine, and I've been sat here with a second cup, watching the rain. Dangerous, is it? It's only a laptop, mind.
Caller It's dangerous, yes — I'm looking at your case on our system now, and it's flagged as serious. You're a SafeNet customer, so we're obliged to act on this today.
Fake authority or brand impersonationUrgency or fear
Bernard Am I a customer? Well, there's a thing. I don't remember signing anything. Is it like the television licence — do they just assume? Only I've got the wireless on and that's plenty of noise for one house.
Caller Your account came up automatically with the hardware, sir — it's all standard. The important thing now is getting the network looked after before the spread goes further.
Remote access requestUrgency or fearFake scan or planted problems

It frames the request as routine and already underway, so the listener feels the decision is made and only cooperation remains.

Real company: A real support team never asks to take over your device from a cold call, and would tell you to call the number on your bill.

Bernard Almost sounds like the garden, the way you say spread. My runner beans have gone everywhere this year. Now then, would you be warm enough where you are? It's turned quite raw out.
Caller That's kind of you, but I'm not the one at risk here. Whoever built this thing could already have their hooks in your files, so we need to deal with that before anything else.
Remote access requestUrgency or fear
Bernard Hooks, you say. Well, thank goodness you found me, then. I'd have sat here none the wiser. Are you eating properly, though? You sound like a lad who skips his lunch.
Caller I'll ring you back another day. Bye now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →