Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1253 · 2026-10-31

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that arrives with a phone number attached is not a warning, it is an advert for a caller.

“The caller said the hour was against them and it might not happen tonight, and the householder said that was a relief.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

threat expired on its own, no entry granted · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Good, you got through to us then. I'm at SafeNet Billing, and that warning on your screen is about your machine — I want to talk you through it while it's still in front of you.
Fake pop-up with phone numberFake authority or brand impersonation

The caller treats the pop-up as proof of a real problem, so the warning itself becomes the reason to trust them.

Real company: A real security firm never phones you off a pop-up. You would look up their number yourself and call them.

Bernard Oh — well, now, that's handy. You're from the SafeNest people, are you? Because I've got a warning here and no end of a fuss it's making, but the thing is I can't read it properly with these specs, the left lens keeps sliding. Is that warning the blue one with the big sort of triangle?
Caller SafeNet Billing, yes, that's the one. It's the warning with the big triangle, that's the serious one — it means the thing's already in there, so I'd rather we saw to it before it gets any further.
Urgency or fearFake pop-up with phone numberFake scan or planted problems

It turns a scary on-screen warning into proof of danger, so the person acts fast instead of checking.

Real company: A real security firm never treats a pop-up as a diagnosis and never rushes you to fix it by phone.

Bernard In there already, is it. Hm. Well, I'll take your word for it. I've got the specs on now, though these are the ones for reading the paper. Hold on — is the warning the one with the picture on it, or the other one? There's a lot going on up here.
Caller The picture one. Look, that warning's from us, from the billing side, and it doesn't put a thing on your screen for its own amusement. Can we deal with what's on it before the screen does something we can't undo?
Fake authority or brand impersonationUrgency or fear
Bernard Before the screen does something. Right you are. Only I've got a jigsaw out on that same table, and it's been missing a piece since Easter, and I keep thinking if I move the machine the piece'll turn up. Have you ever had that? A jigsaw going on for months?
Caller I don't get much time for puzzles, sadly. The truth is I need to be looking at that screen with you, so I can see where this infection's got to — nothing's moving off your machine till then, that's how we work.
Remote access requestUrgency or fear

It pairs a scary claim of infection with a calm promise of safety, so agreeing to let them in feels like the cautious choice.

Real company: A real support team never needs to watch your screen to fix a problem, and never contacts you first about an infection.

Bernard Oh, you'd need to be here in the room, would you? Well, you'd be very welcome, but it's a fair old way, I shouldn't wonder, and the back step wants painting before winter and I haven't started. Is it a long journey, for you?
Caller Not in the room, no — I can be in it from here, through the line, if you'd just let me. To be honest, the hour's against us and the line's not helping, so it may not happen tonight at all.
Remote access requestUrgency or fear
Bernard Not tonight, then. Oh, that's a relief, in a way — it's nearly time for the radio and I'd have had to choose. Well, you have a nice evening, and mind how you go on the road.
Caller I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →