Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1188 · 2026-10-30

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that arrives on your own screen and invites you to ring a number is not a warning, it is an advert for the caller.

“The caller said the machine was compromised and could be seen from his end, and the householder asked whether he could see the slipper.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

warning never verified, access never granted, caller quit · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, you've reached the number on the warning, so you've done the right thing ringing it. That full-screen alert on your laptop, that's why I'm here.
Fake pop-up with phone numberFake authority or brand impersonation

The caller praises Bernard for ringing, which makes him feel he did the right thing and lowers his guard.

Real company: A real security company never puts a phone number on a warning screen and never treats a cold call as proof of a problem.

Bernard Oh — well — now. SafeBelt Billing, is it? I've got the screen here but the words have gone all wobbly, I think my glasses are in the garden room. Is it raining where you are? You'll want to keep dry.
Caller SafeNet, SafeNet Billing, sorry, it's been a long shift. Look, forget the glasses for a moment — that warning means the machine is at risk right now and every minute counts.
Urgency or fearFake pop-up with phone number

A ticking clock shuts down careful thinking, so people act on the warning before they check it.

Real company: A real security firm never phones from a pop-up and never tells you to act within minutes.

Bernard A long shift, that's no good to anybody. Have you had your dinner? I've got a bit of bread and some soup going spare, if you were nearer. Was it the belt people you said — SafeBelt? I'm sure I've had a letter from them.
Caller Not the belt people, no, there's no belt. SafeNet Billing, and I promise there's no letter — what's on your screen is the only thing that matters, and it's telling you the whole machine is compromised.
Fake authority or brand impersonationUrgency or fear
Bernard Compromised. That's a big word for a Thursday. Well, I say Thursday — it might be Wednesday, I lose track now the bins changed. Anyway, the screen's stopped doing anything. It's just sat there with its warning like a sulky cat.
Caller Wednesday or Thursday, it doesn't matter, that warning's still live and it means someone's inside your machine. I can see it from my end, and I can have the whole thing cleared if you just let me have a look at it.
Remote access requestUrgency or fearFake scan or planted problems

It pairs a scary claim that someone is already inside with a calm offer to fix it, so relief feels one click away.

Real company: A real security team never asks to look inside your machine on a cold call, they tell you to contact them through official channels.

Bernard Inside my machine? It's a laptop, dear, nothing gets inside it but fluff. Oh — hang on, one of my slippers has gone under the chair and I'm not getting down there without a plan. Can you see the slipper from your end, while you're looking?
Caller I can't see under your chair, only the warning, and that's still sitting there waiting. Just let me have a look at the machine and I'll get it sorted.
Remote access requestFake scan or planted problemsUrgency or fear
Bernard Well, that's a pity. I'd hoped you could. There's no rush on the machine, is there? It's not going anywhere and neither am I.
Caller Forget it. I'm putting the phone down now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →