e" type="application/rss+xml" title="Bernard Doesn't Press That" href="/feed.xml">
Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #2663 · 2026-11-11

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
4
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

No real company will ask you to install software to give you a refund.

“Honestly, I don't know why I bother. Good afternoon.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

caller gave up, no trust gained · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Hello, this is SafeNet Billing. You have a warning on your screen — we need to act now.
Fake pop-up with phone numberFake authority or brand impersonation

It creates a false sense of urgency and mimics a legitimate security alert to trick the victim

Real company: A real company would never display a fake pop-up with a phone number to contact

Bernard Hello, SafeNet Billing? Oh, I do hope you're not too cross — I was just looking for my reading glasses, they're on my head, aren't they? I had a pop-up on the screen, yes, but I don't know what it said. You're on the phone number from the screen, aren't you?
Caller We're very concerned — the pop-up may be a virus. If you don't act soon, your data could be at risk.
Urgency or fear

Creates panic to pressure the victim into quick, unthinking action.

Real company: Warn about risks without demanding immediate action or revealing personal details.

Bernard Oh, a virus, are you saying? I hope you're not too worried — I haven't touched the screen since it appeared. It said something about a warning, didn't it? I didn't read it all, I was making a cup of tea.
Caller We're from SafeNet Billing — this is an official security alert. If you don't let us help you now, your computer may be compromised.
Fake authority or brand impersonation
Bernard Oh, SafeNet Billing — I think I've got that wrong. Is it Safenet Billing or Safenettle? I was just checking the kettle, I think it's boiling. I don't know if my computer's compromised — I haven't touched it since the pop-up came on.
Caller We're from SafeNet Billing — this is urgent. If you don't let us connect to your device, the damage could spread.
Remote access requestUrgency or fearFake authority or brand impersonation

Creating a sense of urgency and fake authority pressures victims into acting without thinking.

Real company: A real company would never ask for remote access and would provide clear, calm instructions.

Bernard Oh, I do hope you're not too cross — I was just looking for my reading glasses again. I don't know if I can let you connect, I was talking to Mavis about it. She says it's not a good idea.
Caller We're from SafeNet Billing — this is a security matter. If you don't let us help now, your personal information may be at risk.
Fake authority or brand impersonationRemote access requestUrgency or fear
Bernard Oh, personal information — I don't know where that would be. I was just looking for something, I think I left it on the table. I didn't know it was a security matter — I thought it was just a pop-up.
Caller Honestly, I don't know why I bother. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →