Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1738 · 2026-11-05

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that appears on your screen with a phone number on it is not from a real company, so do not call it.

“Nothing was installed, nothing was paid, and the call went nowhere.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

caller gave up, nothing crossed the threshold · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, support line, how can I help? You've got the warning on your screen in front of you, haven't you — the full-screen one, with our number on it.
Fake pop-up with phone numberFake authority or brand impersonation

The caller treats the pop-up as proof of a real problem, so the warning itself becomes the reason to trust them.

Real company: A real security company never puts a phone number on a warning screen and never calls you about it.

Bernard Oh — now — is that SafeBelt? I've got the screen here but I can't read a word of it without my glasses. Hold on, they're on my head, aren't they. Always the way.
Caller SafeNet Billing, yes. Look, that warning won't sit there politely — the longer you leave it, the worse it gets, so I'd rather you had your glasses and we moved on this quickly.
Urgency or fearFake pop-up with phone number

A ticking clock shuts down careful thinking, so the target acts before checking whether the warning is real.

Real company: A real security firm gives you time and a written report, and never rushes you off the phone.

Bernard SafeBelt, right you are. Oh — mine's not a belt, it's the laptop, the one on the little table by the window. Dreadful picture on it though. Is it meant to be flashing like that?
Caller SafeNet Billing, and the flashing is exactly what I mean — that's the infection making itself known. Now, are you the person named on the billing account for that machine?
Fake authority or brand impersonationFake scan or planted problemsUrgency or fear

A confident company name plus a scary explanation makes the flashing screen feel like proof of a real problem.

Real company: A real security company does not cold-call about a warning on your screen, and it never treats a blinking light as a diagnosis.

Bernard Whose name's on it? Oh, that'd be mine, Bernard — but I couldn't tell you what I put down. Is it tea you'd like while we sort this? The pot's still warm, it's no trouble.
Caller No tea, thank you — I'm not in the building. Mr Bernard, I need to get onto your machine now, before that infection gets any deeper.
Remote access requestUrgency or fearFake scan or planted problems

It pairs a scary claim about an infection with a demand for immediate access, so panic crowds out checking.

Real company: A real support team never calls out of the blue to demand remote access, and would let you call back on a number you look up yourself.

Bernard You're not in the building? Where are you then — is it cold where you are? Only I've a cardigan going spare on the hook, I always keep one.
Caller I'm at the support centre, that's all that matters, and it's not getting any warmer while your machine sits there. If you'd just let me take a look at it, I can clear this warning off myself.
Remote access requestUrgency or fear
Bernard Take a look — from the support centre? How would you manage that, is it on a wire? Oh, wait a moment, there's somebody at the door. No, it's next door's cat. Carry on.
Caller I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →