Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1383 · 2026-11-02

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that only a phone call can clear is not a warning, it is a sales pitch with a countdown.

“Nothing was installed, nothing was paid, and the call went nowhere.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

no access granted, warning left to spread on its own · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller What's that tapping? No — never mind. You're looking at a full-screen warning on your screen right now, I can see it flagged at my end, and you've done the right thing ringing the number on it.
Fake pop-up with phone numberFake authority or brand impersonation

It invents a problem the person cannot see for themselves, so the caller becomes the only source of truth.

Real company: A real company never monitors your screen and never asks you to ring a number shown in a pop-up.

Bernard Oh, that's just the coal settling — needs another shovel in a minute, I'll see to it. A warning, you say? Well, the screen's gone a funny sort of amber. Is that the colour it usually comes in?
Caller Amber's exactly what I'd expect, and it won't stay amber — this sort of thing spreads quickly through the whole machine once it starts. How long's it been sat there like that, roughly?
Urgency or fearFake scan or planted problems

A ticking clock makes people act before they think, and asking how long it has been there keeps them focused on the problem instead of doubting it.

Real company: A real security team states the facts plainly and gives you time to verify through official channels before anything is changed.

Bernard Oh — well — now, let me think. Since before my lunch, because I remember looking at it over my sandwich. Is it a fast-moving sort, then? Only nothing in this house moves fast, I can tell you that much.
Caller Since before lunch, that's a fair while — that's what worries me. Now, I'm with SafeNet Billing, and we handle this sort of warning on machines all over, so you're in the right hands.
Fake authority or brand impersonationUrgency or fear
Bernard SafeNet, right you are. Now — I hope you don't mind me saying — are you eating properly? You sound like a young man who's been on the go all morning and skipped his dinner.
Caller I've had a sandwich, thank you, I'm fine. Listen, the warning won't clear itself, and I don't want it sitting on there overnight — what I need is for you to let me take a look at the machine and clear it for you.
Remote access requestUrgency or fear

Offering to fix the problem personally feels helpful, and the push to act before overnight adds pressure to agree quickly.

Real company: A real security team tells you to run your own antivirus scan and never asks to connect to your computer.

Bernard Course you did — very good. Now, you'd be seeing it through my screen, would you? Only the buds next door has taken to doing the phone, and I don't want him watching over my shoulder.
Caller No budgie involved in this, I promise. It's just me and you and the warning — but I do need to be let into the machine to clear it, and that's the bit we haven't sorted yet.
Remote access requestFake scan or planted problems
Bernard Oh, I'd not know how to let anyone in. The door's open but that's the front one. The coal fire needs another shovel, that's the thing — you'd not believe the carry-on.
Caller Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →