Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1168 · 2026-10-30

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning on your screen is not a phone call, and no support desk can fix it by being let in remotely.

“The caller asked to be let onto the machine down the line, and the householder asked whether the thing needed feeding.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestUnsolicited contact

warning unaddressed, no consent given, caller rang off · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing support, you've reached the right desk. I understand there's a warning showing on your screen — that's why you rang, isn't it?
Fake pop-up with phone numberFake authority or brand impersonation

He confirms the warning is real and frames the call as Bernard's own idea, which lowers his guard.

Real company: A real company does not cold-call about a pop-up, and it never treats a number on screen as proof of who called.

Bernard Oh, hello there. Yes, the screen's gone all red and shouty — I've never seen it do that. What did you say the firm was called, sorry? My left ear's a bit useless and this hearing aid whistles something awful when I tilt my head.
Caller SafeNet Billing, that's us. Now, that warning you're seeing — it means the machine's already compromised, so we really don't have long before it spreads.
Urgency or fearFake authority or brand impersonation

A ticking clock and a scary word like compromised push people to act before they think to check.

Real company: A real security firm never cold-calls about a warning on your screen, and never claims a countdown.

Bernard Safebelt Billing, right you are. Spreads where, though? Only it's the only machine in the house and I'm rather fond of it — it's got all my photographs of the garden on it. Oh, hold on, the aid's whistling again.
Caller SafeNet Billing, like I said. It spreads through your files, your photographs and all — but I can stop it if you let me have a look at the machine.
Fake authority or brand impersonationUrgency or fearRemote access request

A confident company name plus a scary claim about spreading damage makes the listener want to hand over control fast.

Real company: A real security firm never cold-calls about an infection and never asks to look at your machine.

Bernard Oh, would you? That's kind. Only you'd have to come round, and the front step's a bit slippery this weather. Are you local? I could put the element on and we'd have a proper talk about it.
Caller No, no — I don't need to come round, I'm not in the area. It's all done down the line; I just need you to let me onto the machine from here.
Remote access requestUnsolicited contact

Offering to fix it remotely feels convenient and helpful, so the target lowers their guard and hands over control.

Real company: A real support team never takes remote control of your device from a cold call. You call them, on a number you look up yourself.

Bernard Down the line, is it? Fancy. Oh — the aid's gone quiet now, hang on, I'll cup my ear. There. You said you'd let yourself onto it? Does it need feeding, this thing, or does it just sit there?
Caller It doesn't need feeding, it's a program — look, forget all that. I just need you to say yes and let me on, and the warning goes away.
Remote access requestUrgency or fear
Bernard Well, I don't mind the warning, if I'm honest. It's rather a nice colour. Oh, that's Mavis having a go at the curtains. You're not frightened of a bird, are you? She's soft as anything.
Caller I'll ring you back another day. Bye now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →