Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1523 · 2026-11-03

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that only the caller can see, and only while you stay on the line, is not a warning about your machine.

“The caller wanted a look at the machine and Bernard had only the one pair of hands, so no look was had.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

wrong number of hands, no look taken, caller quit · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing support, you're through to the billing security team. That's our warning on your screen, sir, and I can see it from here.
Fake pop-up with phone numberFake authority or brand impersonation

A scary warning on screen plus a confident voice claiming to see it makes the threat feel real and already confirmed.

Real company: A real security team never calls about a pop-up and never claims to see your screen. You would contact them using a number you look up yourself.

Bernard Oh — well, now, that's a clever trick, seeing it from your end. Can you see the little rubber plant on the sill as well? Only it's gone a bit droopy and I can't work out if it wants more water or less.
Caller No, sir, I can't see your plant — I can only see the infection warning, and I have to tell you it's been sitting there getting worse while we've been chatting. That's why I need you to act on it now.
Urgency or fearFake scan or planted problems

It invents a hidden threat that grows while you hesitate, so waiting feels dangerous.

Real company: A real support team states findings plainly and lets you take your time to verify them.

Bernard Worse, is it. Hm. Hold on a moment — my hearing aid whistles something dreadful when I cup my ear, and I want to catch this properly. There. Now, what was it getting worse of?
Caller The infection, sir — the warning on your screen is escalating. I'm from SafeNet Billing's security division and I'm authorised to deal with this, so let's not waste any more time on it.
Fake authority or brand impersonationUrgency or fear
Bernard Safe something, you said? SafeNet — right you are. Now, is that the same lot that did the loft insulation, or a different firm entirely? Only I've got a leaflet somewhere and I never throw a leaflet away.
Caller Different firm entirely, sir — loft insulation is nothing to do with us. I'm billing security, SafeNet Billing, and the warning is getting worse while you look for that leaflet.
Remote access requestUrgency or fearFake authority or brand impersonation

It reframes the caller as a different, more official department and adds time pressure so Bernard stops checking and starts complying.

Real company: A real security team would never rush you off the phone and would give you a reference number to call back on.

Bernard Billing security. Right. Well — the thing is, if a bill's gone wrong I'd rather hear it from the lady at the counter, she's got a lovely way about her. Do you work in a shop or is it more a telephone sort of job?
Caller Telephone, sir, always telephone — we haven't got a counter, we've got a warning on your screen, and it's the last thing I'm going to say about the counter. Can you just let me have a look at that machine?
Remote access requestFake pop-up with phone numberUrgency or fear
Bernard Not with the phone in my hand, I can't. I've only the one pair of hands and the nurse says not to do two things at once. She's got a name like a flower — Lily? Iris? One of those.
Caller Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →