Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1233 · 2026-10-31

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
6
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that arrives with a phone number attached is an advertisement, not an alarm, and no one legitimate needs to be let into your machine over the line.

“The agent offered to look at the machine himself, and the householder asked how he would go about it and whether he would need feeding first.”

Fake pop-up with phone numberFake authority or brand impersonationUnsolicited contactUrgency or fearFake scan or planted problemsRemote access request

alarm unpressed, door unopened, caller hung up first · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, you're through to the team that handles the alert on your screen. So you've seen the warning, then?
Fake pop-up with phone numberFake authority or brand impersonationUnsolicited contact

It treats the pop-up as already proven and asks you to confirm it, so you accept the warning instead of questioning it.

Real company: A real company never phones you about a pop-up. You would look up their number yourself and call them.

Bernard Oh, I've seen plenty this morning, but I don't know about a warning. Is that the orange thing in the corner, or the big one across the middle? My eyes aren't what they were before lunch.
Caller The big one across the middle, yes, that's the one. That's not a decoration, sir, that's your machine telling you something's badly wrong.
Urgency or fearFake pop-up with phone number

It turns a harmless on-screen graphic into a warning sign, so fear pushes the person to act before thinking.

Real company: A real software company never treats a pop-up as proof of infection and never asks you to call a number on it.

Bernard Oh — well — now, is that a Wednesday thing? Because I had it down as Thursday all morning and then the radio said otherwise. What was it you said was wrong with it, the machine?
Caller I'm from SafeNet Billing, the people behind that alert, so this call is official. The message on the screen is telling you the machine's been compromised.
Fake authority or brand impersonationFake scan or planted problems

A confident title and a claim of official status make the warning feel like it comes from someone with the right to give orders.

Real company: A real security firm does not cold-call you about an alert on your screen, and it never treats a pop-up as proof of a problem.

Bernard Safebelt Billing, is it? That's a nice name. Tell me — do you get much trouble with that sort of thing, or is it mostly quiet where you are? I expect you're rushed off your feet.
Caller Quiet's not the word, sir, we've had a flood of these today, and yours was part of it. Now, the fastest way to settle this is for me to look at the machine myself, so if you just let me have that bit of access, I can clear it off the screen for good.
Remote access requestUrgency or fear

Offering to fix the problem personally feels helpful, and the mention of a flood of cases makes the danger seem real and pressing.

Real company: A real security team never asks to connect into your computer from an unexpected call. They point you to official support channels you look up yourself.

Bernard Access — right you are. Only, I'm not sure you'd want to see it, there's a pile of bills and a half-finished crossword. How would you go about it, exactly? Would I need to feed you anything first?
Caller Nothing to feed me, sir, it's all done over the line, I just need to be let in at your end. Do you see the little box asking for permission there?
Remote access requestFake pop-up with phone number
Bernard Oh, there's boxes all over the place on that thing — my great-niece set it up and I've never really got the hang of it. Hang on, the parrot's taken against the phone again. Two seconds.
Caller I'll get someone else to ring you. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →