Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1728 · 2026-11-05

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
6
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning on your screen is not a reason to let anyone reach into your machine. Real firms do not ask to look at your screen through the phone line.

“The caller wanted to be at the screen through the line, and Bernard asked how that worked with the man being down the telephone.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problemsUnsolicited contact

screen stayed shut, caller gave up on the tool · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Good afternoon, SafeNet Billing here — you're through to the team that handles the warning on your screen. That full-screen alert you're looking at, that's ours to sort out.
Fake pop-up with phone numberFake authority or brand impersonation

It treats the scary pop-up as real and already theirs, so the person believes the warning is genuine and the caller is the fix.

Real company: A real security company never puts a phone number on a warning screen and never calls you about it.

Bernard Oh — well — now, that's a relief, because the screen's gone all blue and shouty at me and I don't know where to look. SafeBelt, did you say? The letters are fair marching across it.
Caller SafeNet Billing, that's right. The shouting letters tend to mean the thing's spreading while we talk, so I'd rather we moved on it now than at the end of the day.
Urgency or fearFake authority or brand impersonation

A ticking clock stops people from pausing to check whether the warning is real.

Real company: A real security team gives you time to verify the alert through your own account, not a phone number on a pop-up.

Bernard Spreading? Oh dear. Could it get into the kitchen, do you think — I've a jar of marmalade I made myself out there, and I'm not having anything spreading near that.
Caller No, no — it stops at the machine, nothing near your preserving efforts, I can promise you that. Look, I'm the billing end of the warning, and the screen you've described is the one we flag as urgent, so let's not stand about.
Fake authority or brand impersonationUrgency or fear
Bernard Well, that's a weight off. Billing, you said. Does that mean I've been charged for something? Only I've a letter from the council I've been meaning to open since Tuesday and it might be about money.
Caller It could well be — an unauthorised charge against your machine is exactly the sort of thing the warning gets raised for. Before I can pull the record up, though, I need to be looking at the same screen you are, so if you'd just let me have a look at it.
Remote access requestFake scan or planted problemsUnsolicited contact

Asking to see the same screen feels like routine help, so the listener focuses on being assisted rather than on handing over control.

Real company: A real support team never takes control of your screen from a cold call. They give you a number to call back and a reference.

Bernard Let you have a look — how would that work, then, with you being down the telephone? The dog next door looks at my screen sometimes, but he's not much help either. Oh, the bird's off again.
Caller I'd be at the screen through the line, that's what the tool does — you'd barely notice me there. The bird is honestly the least of it; it's this charge sitting there getting older that bothers me.
Remote access requestUrgency or fear
Bernard Through the line? That's clever. Now — a charge getting older, you said. Older than what? Because I had a bill in the spring that I thought was settled, and then it turned out I'd paid the window cleaner twice.
Caller I'll ring you back another day. Bye now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →