e" type="application/rss+xml" title="Bernard Doesn't Press That" href="/feed.xml">
Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #2023 · 2026-11-07

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
4
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

No real company will ask you to act immediately without giving you time to think.

“I'll try again when the line's behaving. Good afternoon.”

Fake pop-up with phone numberUrgency or fearFake authority or brand impersonationRemote access request

no access, no payment, nothing · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Hello, this is SafeNet Billing. Your laptop is infected — you need to act now. There's a warning on your screen showing our number. Please call immediately.
Fake pop-up with phone numberUrgency or fear

The fake pop-up creates a sense of urgency and fear to pressure the victim into acting quickly

Real company: A real company would never use a pop-up to scare you into calling a number

Bernard Hello, SafeNet — oh, I do hope you're well. I'm just here, you know, with the fire on. I had a bit of a row with the cat earlier. What was the number again? Oh, never mind — I'll get it from the screen. One moment, I'll just shuffle this photograph over.
Caller We don't have time for that — the infection is spreading fast. If you don't act now, your data could be lost. Please, just let me help you.
Urgency or fear
Bernard Oh, don't worry — I'm sure it's nothing. I've had a few odd things on the screen before. I'll just check the number again. Do you know, I was just thinking about that photograph. Do you suppose it would look good on the wall?
Caller This isn't just any warning — it's from SafeNet Billing, an official security provider. If you don't let me access your system, the damage could be irreversible.
Fake authority or brand impersonation

Impersonating a trusted brand makes the scam seem legitimate and urgent.

Real company: A real security provider would never ask for remote access or use fear to pressure you.

Bernard Oh, of course — I'm sure you're official. I'll just get the number from the screen again. Do you know, I was just meaning to ask — is it a good idea to have something on the wall?
Caller We need to act quickly — the infection is already in your files. Let me take control now, or you'll lose everything.
Urgency or fearRemote access request

Creating panic makes victims less likely to think clearly or refuse help

Real company: A real company would explain the issue calmly and guide you to official support channels

Bernard Oh — I do hope you're right. I was just thinking about the fire. It's been a bit cold in here. Do you know, I had something I was meaning to describe?
Caller This is not a time for distraction — your system is under threat. Let me access it now, or we may be too late.
Remote access requestUrgency or fear
Bernard Oh — I'm sorry. I was just thinking. I do hope you're right. It's a bit cold in here — would you like some tea?
Caller I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →