Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1238 · 2026-10-31

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that arrives with a phone number attached is an advertisement for the caller, not a diagnosis of your machine.

“The agent said the infection was spreading while it sat there, and the householder asked whether the machine was even switched on.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

threat not pulled, tablecloth undisturbed, no access given · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing support, you've reached the number on the warning. I believe you've got it up on your screen right now?
Fake pop-up with phone numberFake authority or brand impersonation

The caller ties himself to the scary warning already on the screen, so he seems like the answer to the problem rather than its cause.

Real company: A real company never puts a phone number in a browser warning and never cold-calls about it.

Bernard Oh — well, now, there's a great red thing across the whole of it, yes. Frozen solid, it's been like that since teatime. I thought it might be the aerial. Do you get that, with the weather we've had?
Caller That's the infection, sir, and it's spreading while it sits there — every hour it's left, more of your files go. We need to act on this now, before it's beyond saving.
Urgency or fearFake scan or planted problems

A ticking clock and a vague threat of loss push people to act before they can think or check.

Real company: A real security team states findings in writing and gives you time to verify them independently.

Bernard Well, that sounds rather serious. Hang on — is this SafeNest? I had a letter from a SafeNest once, about the gutters. Lovely shade of blue on their van.
Caller SafeNet, sir, SafeNet Billing — different outfit entirely, we handle the threat response side. The warning's carrying our name because we're the ones cleared to remove it.
Fake authority or brand impersonationFake scan or planted problems
Bernard SafeNet. Right you are. Well, I'm glad you rung — I was only watching a thing about lighthouses. Nineteen eighty-seven, that was, the first time round. Do you know, they had a keeper on there all alone.
Caller Lighthouses, right, very good. Now — the warning won't shift itself, so if you'll just let me have a look at the machine from my end, I can pull the infection off it before it does any more damage.
Remote access requestFake scan or planted problemsUrgency or fear

It pairs a scary problem with a friendly offer to fix it, so relief replaces doubt.

Real company: A real support team never takes control of your computer from an unexpected call. They ask you to contact them through official channels.

Bernard Have a look from your end — is that a long way away? Only you sound quite close. I'm not sure the machine's even on. It's in the back room, under the good tablecloth.
Caller Under the tablecloth is exactly where the trouble likes to hide, sir. Distance doesn't matter for this sort of access — I just need you to let me through to it, and we can get started.
Remote access requestFake scan or planted problems
Bernard Oh, isn't that clever. Now — before we get to any of that, are you warm enough where you're sat? It's turned quite raw out.
Caller I'll ring you back another day. Bye now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →