Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1668 · 2026-11-05

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that arrives on your screen with a number to ring is bait, and the number reaches the people who planted it.

“The caller urged him to deal with the warning before it worsened, and Bernard asked whether the caller was warm enough where he was.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

alert expired unanswered, caller hung up first · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, you've reached the number that's showing on the screen — the warning in front of you, the red one. Are you seeing it on your laptop there?
Fake pop-up with phone numberFake authority or brand impersonation

The caller points to something already on the screen, so the warning feels self-proving and the call feels expected.

Real company: A real company never puts a phone number in a warning pop-up and waits for you to call it.

Bernard Oh — well — now, the red one. I've got a red thing but it might be the letter from the council, I've been meaning to open that for a fortnight. Is it a bill, this warning? Only I don't think I owe anyone anything.
Caller No, sir, it's not a bill, it's an alert — your machine is flagged and every minute it sits there it gets worse. It could already be spreading, so we really do need to deal with this now.
Urgency or fearFake scan or planted problems

A ticking clock and a spreading threat push people to act before they think or check.

Real company: A real security team tells you what was found in writing and lets you verify it at your own pace.

Bernard Spreading? Like damp? My cousin Norman sold insurance and he said damp gets everywhere. Oh — wait — is this the same Norman? No, that was the other side. I've lost my glasses, that's the trouble. I had them a moment ago.
Caller Sir, I work for SafeNet Billing, and we don't sell insurance. The glasses don't matter right now — the warning does, and I'd strongly advise you to focus on that. It'll only keep escalating.
Fake authority or brand impersonationUrgency or fear
Bernard Ah, there they are, up top. Silly old thing. Now, you said SafeBoat — is that the one with the boats, or is it more of a paperwork outfit?
Caller SafeNet Billing, sir, not boats — it's billing. And it's about the warning on your screen, which is the bit I need you to concentrate on for me.
Fake pop-up with phone numberRemote access requestFake authority or brand impersonation

It points the person back to a scary warning already on their screen, so the call feels like a follow-up rather than a cold approach.

Real company: A real company never treats a pop-up warning as a reason to call you, and never asks you to act on it over the phone.

Bernard Billing, right you are. Well, the machine's in the front room and I'm in the hall, so it'll have to wait a tick. Are you warm enough where you are? It's turned quite cold on us here.
Caller Cold here too, if I'm honest. But sir, the warning won't wait for warmer weather — if the machine's on, it's already exposed, so we'd need to sort it together.
Remote access requestUrgency or fear
Bernard Oh, that's a thought. Look, I've a letter here from the council I've been meaning to open since Tuesday, and now I can't think why I haven't. Never mind me — you'll want to be getting on, won't you?
Caller I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →