Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1178 · 2026-10-30

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning on your screen is not a phone call. Real help never starts with someone demanding you keep the screen as it is.

“The caller said he carried the authorisation and needed the way opened on his side, and the householder went looking for his specs.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

screen untouched, caller gone, nothing cleared · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, this is the team that handles the warnings, how can I help?
Fake pop-up with phone numberFake authority or brand impersonation

A calm, official-sounding team name makes the call feel like a routine follow-up to something already on the screen.

Real company: A real company does not staff a phone line behind a warning on your screen, and you would call them, not the reverse.

Bernard Oh — hello there. Safebet Billing, is it? Well, you'll know more about that than I do. There's a great orange thing sitting on my screen, bold as brass, and I can't get it to budge.
Caller That orange warning is the one, and I need you to understand the clock is running on it — the longer it sits there the further the problem spreads through the machine. So let's not lose any more time.
Urgency or fearFake pop-up with phone number

A ticking clock shuts down careful thinking, so the person acts fast instead of checking the warning.

Real company: A real software company never treats a pop-up as a countdown and never asks you to rush.

Bernard Right you are, sorry. So what is it you'd like me to do about that great glaring thing on the screen? Only I can't get it to shift.
Caller Leave the screen exactly as it is, don't touch a thing — this is my department's patch and I carry the authorisation for it. Now, about that warning, I need it handled before it gets any worse.
Fake authority or brand impersonationUrgency or fear
Bernard Oh, that's a relief — I won't lay a finger on it. You know, I had it in my head it was Thursday, but it's Wednesday, isn't it. Not that it matters to me, mind.
Caller Wednesday it is, so we're clear on that. Now, what I need is for this to be dealt with properly, which means I'll need to look at the machine from my end so I can clear the warning myself.
Remote access requestFake scan or planted problems

Offering to fix the problem personally feels helpful, and it moves the caller from talking to touching the computer.

Real company: A real security team never takes remote control of your machine from an unexpected call. They point you to support you contact yourself.

Bernard Look at it from your end — how does that work, then? Would I have to carry it to you, or does it come down the wire like the wireless? It's a heavy old thing, that laptop.
Caller No hauling and no wires — it travels down the line, and I just need you to open the way on your side so I can see what's on that screen.
Remote access requestFake scan or planted problems
Bernard Well — open the way. Hmm. I'd have to find my specs for a start, they've gone under the chair with one of my slippers. Your line's a bit crackly — which firm did you say?
Caller I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →