Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1693 · 2026-11-05

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that arrives with a phone number on it is an advert, and the number rings the person who wrote the warning.

“The caller said the machine was already talking to him, and Bernard said that would be the little thing that hums, and it had been doing that since the frost.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

caller closed the line, nothing opened, nothing owed · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing support, you've reached the right place — I'm looking at the warning on your screen right now, and I can see it's still showing.
Fake pop-up with phone numberFake authority or brand impersonation

Claiming to already see the screen makes the warning feel real and confirms the caller as the one who can fix it.

Real company: A real company never cold-calls about a warning on your screen and never claims to see your display.

Bernard Oh — well, now, that's clever, because I can't see you at all. Are you in the box under the telly? Only the milkman's owed two pounds and I was just counting it out.
Caller No, no, I'm not in the box — that warning means the machine's been attacked, and the longer it sits there the worse it gets. Every minute it's up, more of your files are going.
Urgency or fearFake pop-up with phone number

A ticking clock makes people act before they think, so they skip checking whether the warning is real.

Real company: A real security warning comes from your own software and never tells you to phone a number in a pop-up.

Bernard Going where? It's a nice tidy little machine, it doesn't wander. Is it a green warning, or the red one? I only ask because the red looks ever so much crosser.
Caller I'm not getting into colours with you — I'm from SafeNet Billing, and my department only handles this one warning. It's the red sort, the angry sort, and it's asking to be dealt with.
Fake authority or brand impersonationUrgency or fear
Bernard SafeNet, you said — that's the gas people, isn't it? No, sorry, the gas is with the other one. Anyway, I'd have thought an angry red warning could do with a cup of something and a sit-down.
Caller It's not gas, and it's not for sitting down with. What it needs is for me to get onto your machine and clear it off, so if you'd just let me have a look at it, we can—
Remote access requestFake scan or planted problems

Offering to fix a problem he just described makes the stranger feel like a helper rather than an intruder.

Real company: A real support team never asks to connect to your computer from an unexpected call. You call them, not the reverse.

Bernard Have a look from where you are? That's a long way to peer. And the screen's got a smudge on it I've been meaning to see to, so it wouldn't be at its best.
Caller The smudge isn't the issue, the warning is. Look, I can see the machine has a live connection to us right now — it's chattering away at my end. All I need is for you to open it up to me.
Remote access requestFake scan or planted problemsUrgency or fear
Bernard Chattering, is it? That'll be the little thing that hums. I did wonder. It's been doing that since the frost.
Caller I'll ring you back another day. Bye now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →