Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1558 · 2026-11-03

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that appears on your screen with a number to call is bait, and the real fix never involves letting a stranger in.

“Bernard asked what the caller would actually do once inside, and the line went dead.”

Fake pop-up with phone numberUrgency or fearFake authority or brand impersonationFake scan or planted problemsRemote access request

explanation requested, explanation withheld, caller walked · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing support, you've reached the number on the warning — I can see the alert sitting on your screen right now, so let's get that cleared before it spreads.
Fake pop-up with phone numberUrgency or fearFake authority or brand impersonation

It confirms the scary thing on the screen and adds a ticking clock, so the person trusts the voice that seems to already know their problem.

Real company: A real company never cold-calls the number in a pop-up, and never claims to see your screen before you have even asked for help.

Bernard Oh — well — now, that's very good of you. Before what spreads, sorry? I've got the wireless on rather loud. Oh, and while I've got you — is it warm where you are? Only I've had the heating off since Tuesday and I'm in two jumpers.
Caller The infection, sir — it's already spreading through your files, and every minute it sits there it gets harder to pull back. Never mind the weather, we need to deal with this now.
Urgency or fearFake scan or planted problems

A ticking clock shuts down careful thinking, so the target acts fast to stop a threat that does not exist.

Real company: A real security team gives you written findings and time to verify them, and never rushes you off the phone.

Bernard Spreading through my files, you say. I did wonder — I've got a library book that's three weeks overdue and I keep blaming the post. Is it that sort of spreading, or a different sort?
Caller Not a book, sir — I'm SafeNet Billing, we handle the security side of that machine, and I can see the warning still sitting there in front of you. It's the software, not the post.
Fake authority or brand impersonationFake scan or planted problems
Bernard SafeNet, right you are. Or was it SafeNest? Never mind. I'll be honest with you, I can't see a blessed thing — I've had the little screen propped up with a crossword from last week, so it's mostly a five-letter word for Tuesday.
Caller Doesn't matter what it says, sir, the alert's still on there doing damage. Look, I need to get into your machine to shut this down before it gets any further — if you just let me have a look at it.
Remote access requestUrgency or fearFake scan or planted problems

It pairs a scary claim of ongoing harm with a request to take control of the computer, so the victim feels they must act now to stop the damage.

Real company: A real support team never asks to connect into your computer from an unexpected call, and would tell you to contact them through official channels.

Bernard Have a look, you say. Well, you're welcome, but the machine's in the front room and I'm out in the hall with the phone, so you'd have a long wait. Would it keep while I get my bearings?
Caller It won't keep, sir, that's the whole trouble — it's moving while we chat. Stay where you are and I'll talk you through getting me onto the machine from the hall.
Remote access requestUrgency or fear
Bernard Oh, that's kind, but I'm no good at being talked through things over the phone, I lose the thread. My niece tried it once — the one who's a teacher, or is it the other one. Anyway, what is it you'd actually do once you were in there?
Caller Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →