Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1718 · 2026-11-05

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that appears on your screen and comes with a number to call is bait, not a bill, and nobody who sees your screen can also be trusted to fix it.

“The caller said the warning on the screen was his to fix, and Bernard wanted it settled which box he was meant to be looking at.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

caller ran out of script before Bernard ran out of evening · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, you're through to support, and I'm glad you called — I can see the warning sitting on your screen right now.
Fake pop-up with phone numberFake authority or brand impersonation

Claiming to already see the warning makes the call feel connected to the screen, so the target trusts the caller's version of events.

Real company: A real company does not watch your screen or call you about a pop-up. You reach them through a number you look up yourself.

Bernard Oh — well — now, you can see it from there, can you? That's clever. Is it the big orange one? Only there's a smaller grey box underneath and I didn't know which to look at first.
Caller Big orange one, yes, and I'd leave the grey box alone — that's the one doing the damage. The longer it sits there the worse it gets, so we really do need to sort this before it spreads to everything else in the house.
Urgency or fearFake scan or planted problems

It creates a ticking clock and a spreading threat, so the person acts fast instead of checking.

Real company: A real support team never claims a warning on your screen is spreading damage, and never rushes you.

Bernard Spreads, does it? Goodness. Mind you, my neighbour's cat gets into everything that way — over the fence, straight through the flowerbed. Did I tell you about the fence?
Caller The fence can wait — I'm from SafeNet Billing, this is our official warning, and I need you to focus on the machine in front of you. Whatever's happening in the garden, it's nothing compared to what's sitting on that laptop.
Fake authority or brand impersonationUrgency or fear
Bernard SafeNet Billing, is it? I had a letter from something like that once, or maybe it was the boiler people. Anyway, that panel out the back is leaning badly and I keep meaning to see to it.
Caller I'm not the boiler people, I'm SafeNet Billing, and I've already told you the warning on your screen is ours. Look, this is the last thing I'll ask — can you just let me have a look at the machine myself, remotely, so I can see what we're dealing with?
Remote access requestFake authority or brand impersonationFake pop-up with phone number

Asking to look at the machine himself sounds helpful and final, so the target feels the problem will be solved if they simply agree.

Real company: A real software or billing company never asks to connect to your computer from an unexpected call, and would point you to support you contact yourself.

Bernard Have a look yourself? Oh, I don't think I could manage all that — it took me an age just to get the lid open. Hang about, the neighbour's cat is up on the shed again. Little devil.
Caller That's — right, that's the end of it, I've got nothing left on my sheet and the line's going patchy at my end anyway. I've been at this since the start of my shift and it's plainly not going to happen with you, so I'll leave you to your evening.
Remote access request
Bernard Oh — right you are then. Sorry I couldn't be more help. What was it you wanted again? Only you never quite said.
Caller Honestly, I don't know why I bother. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →