Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1683 · 2026-11-05

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
6
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

Nobody who calls you out of the blue can look at your computer unless you set it up, and no real warning needs a stranger on the line.

“The caller offered to look at the screen down the line, and Bernard wondered whether that meant a visit and mentioned a sticky key.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problemsUnsolicited contact

remote session pitched, garden preferred, nobody plugged in · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Good afternoon, SafeNet Billing support, you've reached the number from the warning on your screen. That full-screen alert in front of you, that's us, and I can help clear it.
Fake pop-up with phone numberFake authority or brand impersonation

The caller claims to be the very warning on the screen, so the alert feels like a real company reaching out rather than a stranger calling.

Real company: A real security company never puts a phone number in a full-screen alert and never calls you about it.

Bernard Oh — well, now. Saffron Billing, you said? That's a nice name. I've got the screen in front of me, yes, though it's gone a very peculiar shade of red and there's a countdown on it, or I think it's a countdown. Are you warm enough where you are?
Caller The countdown's the important bit, sir, it means the hold on your machine is running down and these things can lock up entirely once it hits zero. SafeNet, not Saffron, and I'd rather we sorted it before that timer gets anywhere near the end.
Urgency or fearFake pop-up with phone number

A ticking clock shuts down careful thinking, so people act fast to avoid a loss they were just told is coming.

Real company: A real security firm never puts a countdown on your screen and never phones you from a pop-up.

Bernard SafeNet, got it. Is that red business on the screen in a hurry, or will it keep? Only I've the garden to see to before the rain. And I've got my days in a muddle again — it's Thursday, not Tuesday.
Caller It's Thursday, you're right, and that's rather the point, the timer doesn't care what day it is, it's counting down regardless. I need you to stay with the screen, sir, the garden will still be there but your machine might not be behaving by then.
Fake authority or brand impersonationUrgency or fear
Bernard Oh, the machine's been behaving oddly since spring, so I wouldn't lay that at your door. Now, is this a subscription I'm paying for, or is it more of a friendly warning? I only ask because I do like to know what I'm getting.
Caller It's a warning, and it's free to sort out, but only if I can reach the machine directly. If you let me connect to it from my end, I can look at it myself and you can put the whole red business behind you.
Remote access requestUrgency or fear

Offering to fix the problem for free lowers your guard, and the offer to connect feels like help rather than a request for control.

Real company: A real security team never asks to connect to your computer from a cold call, and would tell you to contact them through official channels.

Bernard Connect it, you say. Now, would that be you coming here, or is it more of a telephone arrangement? Only I don't drive and the bungalow's a bit of a walk from the road. And the machine's got a sticky key, I should mention.
Caller No travelling, sir, it's all done down the line, I'd be looking at your screen from here. There's a little arrangement I can set going that puts me in front of it, sticky key and all, so shall I get that started?
Remote access requestFake scan or planted problemsUnsolicited contact

Offering to see and control the screen feels like expert help arriving, so the victim relaxes and hands over the machine.

Real company: A real support team never takes remote control from an unexpected call. They ask you to call the number on your bill or their official site.

Bernard Down the line, you say. That sounds very modern. Do you need anything from me at my end, or does it happen by itself while I see to a few things?
Caller Honestly, I don't know why I bother. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →