e" type="application/rss+xml" title="Bernard Doesn't Press That" href="/feed.xml">
Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1973 · 2026-11-07

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
4
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

No real company will ask you to allow remote access after a pop-up warning.

“I'll ring you back another day. Bye now.”

Fake pop-up with phone numberUrgency or fearFake authority or brand impersonationRemote access request

caller left, remote access refused · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Hello, this is SafeNet Billing. You're receiving this call because a warning has appeared on your screen — did you see it?
Fake pop-up with phone number

The caller claims a pop-up appeared to create a false sense of urgency and legitimacy

Real company: A real company would not call you about a pop-up you did not initiate

Bernard Hello, yes, I saw it — oh, but I think it said *Safenet* — I'm rather deaf in this ear, you know — I've been meaning to get that looked at — and I've been painting the back step, you know, before winter — what did it say exactly?
Caller Hello, this is SafeNet Billing. You're receiving this call because a warning has appeared on your screen — did you see it?
Urgency or fear

Creating a sense of urgency makes the victim act without thinking

Real company: A real company would not use pop-ups to pressure you into action

Bernard Hello, yes, I saw it — oh, but I think it said *Safenet* — I'm rather deaf in this ear, you know — I've been meaning to get that looked at — and I've been painting the back step, you know, before winter — what did it say exactly?
Caller This is SafeNet Billing. The warning on your screen is urgent — it shows a security threat, and we need to resolve it now.
Fake authority or brand impersonationUrgency or fear

It creates a false sense of urgency and uses a fake authority to pressure the victim into acting quickly

Real company: A real company would not use pop-ups to claim urgent action is needed and would provide clear, official contact methods

Bernard Oh — I thought you said *Safenet* — I've been meaning to get that looked at — what's the threat? Is it the one with the orange background? I've been working on the back step.
Caller This is SafeNet Billing. The warning on your screen shows a critical issue — we need to fix it immediately to protect your data.
Fake authority or brand impersonationRemote access requestFake pop-up with phone number

It creates a sense of urgency and legitimacy by mimicking a real service and claiming a problem exists

Real company: A real company would not call you about a pop-up and would not ask for remote access

Bernard Oh — I thought you said *Safenet* — is it the one with the orange background? I've been working on the back step.
Caller This is SafeNet Billing. The warning on your screen needs to be cleared — we need to check your device remotely.
Remote access requestFake authority or brand impersonation
Bernard Oh — I thought you said *Safenet* — I'm not sure about that. I've been working on the back step — and I do hope you're warm enough.
Caller I'll ring you back another day. Bye now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →