Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1733 · 2026-11-05

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning on your screen with a phone number on it is not a real warning, and the number only leads to someone who wants into your computer.

“The caller offered to walk Bernard straight into letting him see the machine, and Bernard offered him a cup of something instead.”

Fake pop-up with phone numberUrgency or fearFake authority or brand impersonationFake scan or planted problemsRemote access request

warning stayed on the screen, caller left the call · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing support, you've reached the number from the warning on your screen. I can see the alert sitting there right now, so let's sort it out before it spreads.
Fake pop-up with phone numberUrgency or fearFake authority or brand impersonation

The caller confirms a scary warning the person can already see, so the threat feels real and already verified.

Real company: A real security firm never phones from a pop-up number, and would tell you to open their site yourself.

Bernard Oh — well — now, that's a relief, someone to talk to. SafeBelt, did you say? The screen's gone a funny shade of orange, but that might be the lamp. Before we get going, are you warm enough where you are?
Caller SafeNet Billing, and yes, I'm plenty warm, thank you. That orange means the infection's active on the machine, so the longer it sits there the worse it gets.
Urgency or fearFake scan or planted problems

It turns a harmless colour on a screen into a countdown, so the person feels they must act before damage spreads.

Real company: A real security company never diagnoses a device from a colour on a web page, and never phones you about it.

Bernard Active, is it. My library book's three weeks overdue and that's been sitting there worse and worse, so I know the feeling. I meant to take it back Tuesday, but the rain. Would a cup of something help while we talk?
Caller SafeNet Billing deals with machines, not books. Yours is infected right now, and I'm the authorised support for this warning, so can we keep to the screen, please?
Fake authority or brand impersonationFake pop-up with phone numberUrgency or fear
Bernard Fair enough, fair enough. Only I can't quite see it from over here — do I need my glasses, or is that bright patch the screen complaining? Hold on, I'll just shift and get a proper look.
Caller That bright patch is exactly what's complaining, you've got the right idea. Now, so I can see what's happening on it myself, you just need to let me have a look at your machine from my end.
Remote access requestFake scan or planted problems

Agreeing with Bernard first makes the next request feel like a natural next step rather than a demand.

Real company: A real support team never needs to reach into your computer. They book a repair or send you written steps.

Bernard Let you have a look — right you are, once I've found it. It's on the little table by the window, only my glasses are on top of it somewhere. You wouldn't happen to know how it gets on in a bungalow, that sort of thing?
Caller Bungalows I can't help with, I'm only on the machines. If you'll just get yourself in front of the thing, I can walk you straight into letting me see it.
Remote access requestFake pop-up with phone number
Bernard Oh — well — in a minute. There's someone at the door, or it might be the wind. You stay on, though, don't you go. I'd hate to lose you halfway through.
Caller Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →