Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1388 · 2026-11-02

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
4
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning on your screen is not a reason to let a stranger reach into your computer, however official they sound.

“The caller offered to reach in from his side, and the householder asked whether it travelled down the wire on its own.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

no reach in, no permission given, caller posted his retreat · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Good afternoon, you've reached SafeNet Billing support — I understand there's a warning showing on your screen right now?
Fake pop-up with phone numberFake authority or brand impersonation

The caller sounds like a known company and names the exact warning on screen, so the target believes the pop-up was real and the call is the fix.

Real company: A real company never calls because of a pop-up, and a genuine warning tells you to close the window and contact them through their official website.

Bernard Oh — hello there. A warning, is it? I did notice something rather orange sitting on the laptop when I came in from the garden. Hold on, let me cup my ear, this thing whistles something dreadful. Safe... Save-a-what, you said?
Caller SafeNet Billing, that's right. And that orange panel isn't sitting there for decoration, sir — it means the machine is already compromised, so I really do need your attention on it right away.
Urgency or fearFake authority or brand impersonation

It pairs a scary claim with a demand for immediate attention, so the person reacts before they think to check.

Real company: A real security firm never cold-calls about a warning on your screen, and would tell you to contact them through their published number.

Bernard Compromised. Right you are. Only the thing is, my glasses have gone walkabout again, so the screen's just a blur of colour to me. Is it a nice sort of warning? Are you warm enough where you are, by the way?
Caller That's very kind, but I'm not the one who needs looking after here. I'm from SafeNet Billing's technical division, and I can assure you this is an official, logged notification — the sort we only issue when something's properly wrong.
Fake authority or brand impersonationUrgency or fear
Bernard Oh, the technical division. Fancy. Wait — there's a noise. That's the little chap next door, the one in the cage by the fence, he's started making a sound like a telephone. Learned it off his owner, I shouldn't wonder. You still there?
Caller Still here, yes. Now, I can see the warning myself from this end, and I'll be straight with you — if we don't get in front of it, the whole machine goes dark. So I just need you to let me take a look at it from here.
Remote access requestUrgency or fear

A deadline and a threat of total loss make people hand over control before they think to check who is asking.

Real company: A real support team never takes remote control of your computer from an unexpected call. You call them, not the reverse.

Bernard Take a look from there. Well, isn't that clever. Would I need to hold it up to the window, or does it travel down the wire on its own? And are you eating properly, young man? You sound like you've been at that desk a long while.
Caller No holding up, no wire — I just need permission to reach in from my side, that's all. You'd not have to lift a finger. And yes, I've had my lunch, thank you.
Remote access request
Bernard Had a bit of lunch, did you. Good, good. Only there's a whistling now, and I think it's my ear — the hearing one, if I cup it, it rather goes off on one. So you'll have to speak up, and slow, mind. What was it you wanted to reach into?
Caller I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →