Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1438 · 2026-11-02

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
6
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning on your screen is not a phone call, and anyone who rings you about it is not helping you.

“The caller wanted to see the screen from their end and Bernard asked whether it appeared on the television or the laptop.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access requestFake verification (CAPTCHA) instructions

warning stayed up, nobody looked, caller gave up · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, you're through to the team that handles the warning you've got up there. Is the message still showing on your screen?
Fake pop-up with phone numberFake authority or brand impersonation

It treats a scary pop-up as real and confirms it, so the person believes they reached the right place by luck.

Real company: A real security firm never puts a phone number in a warning pop-up and never calls you about it.

Bernard Oh — well, now, Bendy Billings, is it? Yes, it's still up, big red thing, and there's a budgie next door that's taken to ringing like a phone, would you believe, so I've been up and down like a yo-yo. What was it you wanted me to look at?
Caller SafeNet Billing, yes. Never mind the bird — that warning's the sign of something active on the machine, and the longer it sits there the more it gets its hooks in, so we really do need to sort it while it's fresh.
Urgency or fearFake scan or planted problems

A ticking clock stops people from pausing to check whether the warning is even real.

Real company: A real security firm never phones from a pop-up and never pressures you to act within minutes.

Bernard Active, is it? Hooks and all. Hmm. Well, it's been sat there since Tuesday I think, unless that was the day the bin men came late. Do you want me to make you something while you're on — no, sorry, you're not here, are you. Is it cold where you are?
Caller SafeNet Billing doesn't send engineers round, so no need to put anything on. Since Tuesday is a long while for a warning like that to be sitting there, we should get it looked at now rather than later.
Fake authority or brand impersonationUrgency or fear
Bernard Now rather than later, yes. That does sound sensible. Only — oh, hold on, there's someone at the door. Well, there isn't, but there might be. Tell me again, Bendy Billings, what is it you'd be wanting me to do?
Caller There's nobody at your door, Bernard. What I need is for you to let me take a look at your screen from my end — you just let me have access and I can see what the warning's done.
Remote access requestFake scan or planted problemsUrgency or fear

Asking to see the screen feels like help, but it hands a stranger control of the computer and everything on it.

Real company: A real security team never asks to take over your screen from an unexpected call, and will point you to support you contact yourself.

Bernard You can see it from your end? That's clever, that is. Back in my day a man had to come out with a ladder. Do you need a code or something? Because my nephew says never to give those out. He's not much of a nephew, mind.
Caller Your nephew's not wrong about codes in general, but this one's just for letting me in, so it's fine. Read it out when it appears and we can get past this.
Remote access requestFake verification (CAPTCHA) instructions

It reframes a security code as harmless and routine, so the victim lowers their guard and hands over the key to their own account.

Real company: A real bank or tech firm never asks you to read out a code so they can get in, and never needs remote access to fix a problem.

Bernard What's it appear on, though — the telly or the laptop? Only the laptop's in the back room and the back room's got the ironing on it. You'll have to bear with me, my left ear's not what it was.
Caller Honestly, I don't know why I bother. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →