Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #263 · 2026-10-21

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

15
Minutes wasted
6
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A real company never phones you about a warning on your screen and asks to be let onto your machine.

“The senior technician asked to be let onto the machine. Bernard asked whether that was like the wireless, and the line went quiet.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearSupervisor hand-offRemote access requestUnsolicited contact

warning unaddressed, no entry granted, they gave up · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, you've reached the number on your screen. That's our warning sitting on your laptop there, so you've done the right thing picking up the phone.
Fake pop-up with phone numberFake authority or brand impersonation

It rewards the person for calling and frames the pop-up as proof, so the warning feels like a service rather than a trap.

Real company: A real security company never puts a phone number in a warning and never treats a call as confirmation of a problem.

Bernard Oh — well — now, is that what it is? I did wonder, when the screen went all shouty at me. Sorry, was it Seafret Billing? Only I've misplaced my reading glasses and they're not on my nose where they ought to be.
Caller SafeNet Billing, that's right. Sir, that warning on your screen means your machine is already compromised, and it's spreading as we speak, so we really need to move quickly.
Urgency or fearFake authority or brand impersonation

A calm-sounding expert names a threat and a deadline, so panic crowds out the chance to check the claim.

Real company: A real security firm never calls about a pop-up and never rushes you. It posts notices in your account or app.

Bernard Compromised, is it? Gosh. Only there's a photograph here on the sideboard I've been meaning to tell somebody about — my nephew at a wedding, in a waistcoat, and he's got the same squint as his father. Where exactly is this spreading to?
Caller SafeNet Billing doesn't comment on photographs, sir, we deal with the machine. I'm a senior technician here, and I'm authorized to look into your case personally — that's the level of service you're getting.
Fake authority or brand impersonationSupervisor hand-off

Claiming a senior title and personal authority makes the caller sound official and important, so people lower their guard.

Real company: A real company gives you a reference number and a public phone line you can call back on your own.

Bernard A senior technician, well I never. Would you like a cup of tea while you're at it? Only I've got the pan on and it's a two-mug job if I'm making one anyway, and you've been very patient with me.
Caller That's kind, but I'm not in the building, sir. Now — I need to look at your machine myself, so I'll need you to let me onto it from here and we'll get this sorted.
Remote access requestUnsolicited contact

Offering to fix the problem personally feels helpful, so the request to enter the machine sounds like the solution rather than the risk.

Real company: A real software company never asks to connect into your computer from an unexpected call. You contact them through official support channels.

Bernard Onto it from there? Oh — is that like the wireless? My nephew set up the wireless and then the radio went peculiar for a fortnight. Hold on, there's somebody at the door. Or is that just the letterbox. Give me a moment, would you.
Caller No, not the wireless — the warning on your screen, sir, we need to act on it. Is there someone with you who could help?
Remote access requestUrgency or fearFake pop-up with phone number
Bernard There's just my visitor in the corner and she's not much for paperwork. Could you say again what it is you actually want? I've got the pan on and I do lose the thread, it's my ear.
Caller Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →