Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #168 · 2026-10-19

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

15
Minutes wasted
4
Red flags found
10
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning on your screen is not a company you called, and nobody legitimate needs remote access to fix it.

“The caller asked to be let in remotely, and got a lecture on fruit cake and a parrot named Mavis.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

nothing gained, kettle answered instead · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, good afternoon. You've got the warning on your screen in front of you, haven't you — that's why you've rung us.
Fake pop-up with phone numberFake authority or brand impersonation

Confirming the warning is already on screen makes the call feel like a response to something real, so trust is granted before any check happens.

Real company: A real security company does not cold-call people who saw a pop-up, and it never treats a pop-up as proof of a problem.

Bernard Oh — well — now. SafeNet, you said? Because the screen's got a lot of red on it, and my cousin Dennis sold insurance, you know, and he'd have said red means stop. Is there a version of this that comes in a gentler colour?
Caller Sir, the colour isn't the point — every minute that red warning sits there, the damage gets worse, so I do need you to stay with me. Are you in front of the machine right now?
Urgency or fearFake pop-up with phone number

A ticking clock shuts down thinking, so the target acts fast instead of pausing to check.

Real company: A real support team never rushes you and is happy to wait while you verify the problem yourself.

Bernard In front of it, yes, it's on the kitchen table, next to the biscuit tin. Have you eaten? Only I've got a bit of fruit cake and the kettle's just coming up. Mavis will want a bit of this — she's my parrot, she does love a crumb.
Caller That's very kind, but I can't eat anything down the phone, sir. Look — the warning on your screen is from SafeNet Billing, we're the authorised people for your machine, so I just need you to keep looking at it for me.
Fake authority or brand impersonationFake pop-up with phone number

A confident brand name and the claim of being authorised makes the warning feel official and hard to doubt.

Real company: A real security company never claims authority over your machine through a pop-up, and never asks you to sit and stare at a warning.

Bernard SafeNet, that's it. SafeNest, I'd have said, like the chocolate. Now then — the budgie next door has learned my telephone voice, did I say? Rings out at all hours. What is it you wanted me looking at, the red bit or the small writing?
Caller SafeNet Billing, sir — no chocolate involved. Forget the small writing, it's the red warning, and I do need to be quick here. If you'd just let me have a look at the machine myself, I can take it from here.
Remote access requestUrgency or fearFake authority or brand impersonation

Offering to take over the machine sounds helpful and expert, so the person relaxes and stops checking.

Real company: A real billing team never needs to control your computer, and would put any charge in writing for you to check.

Bernard Well, quick, yes, only I've got the reading glasses somewhere. Oh — you mean have a look at it from where you are? From your end? That's a funny idea, isn't it. How would you reach it, do you think, through the wire?
Caller It's not through the wire, sir, it's a proper remote link — you'd just let me in and I'd be looking at your screen from my desk. I'll be quick, honestly, just a small thing on your end to allow it.
Remote access request

Asking to 'just let me in' sounds like a small, quick favour, so the target focuses on being helpful rather than on what access really means.

Real company: A real support team never asks to connect to your screen from an unsolicited call, and will tell you to call the number on your bill.

Bernard Ah, a small thing on my end. Well, my cousin Dennis sold insurance, and he always said never sign a small thing. Is it like that? It's a bit like that. Hold on, the kettle's shouting at me.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →