Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #273 · 2026-10-21

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning screen that tells you to phone a number is an advert, not a diagnosis, and switching it off costs you nothing.

“The caller wanted eyes on the screen. Bernard asked about the radio and reached for the wall switch, and the line cleared itself.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

flag unraised, no screen seen, they closed the file · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, you've reached the number on the warning. I take it you're looking at the screen right now?
Fake pop-up with phone numberFake authority or brand impersonation

It confirms the number came from the scary warning, so the target believes they called the right place and trusts the caller.

Real company: A real security company never puts a phone number in a browser warning and never waits for you to call it.

Bernard Well, I am looking at it, yes — it's a big red thing, very red, I'll say that for it. Are you warm enough where you are? Only it's turned bitter out.
Caller I'm fine, but that red screen means the infection is spreading while we talk. Every minute it sits there it gets deeper into the machine.
Urgency or fearFake pop-up with phone number

A ticking clock stops the person from pausing to check anything, because waiting feels like damage.

Real company: A real security company never phones from a pop-up and never claims a warning screen is getting worse by the minute.

Bernard Oh dear. Well, it's been sitting there since Tuesday and the machine seems cheerful enough about it. My nephew set this up, or it might have been the man from the shop — I get the two of them wrong. Would you like a cup of something?
Caller Since Tuesday? Then I need to move fast here — SafeNet Billing has flagged your line as affected, and I can't clear the flag until we deal with what's on that screen.
Fake authority or brand impersonationUrgency or fear
Bernard SafeNet, is it? Right you are. Only my friend Doreen had something like this and she says the fellow wanted to look through her window — no, that's not it, her screen. Anyway. Are you eating properly?
Caller Doreen had the right idea but a bad experience, that's all — with SafeNet Billing it's straightforward. What I'd like is to have a look at your screen myself, just briefly, so I can see the damage for myself.
Remote access requestFake scan or planted problems

Asking to look at the screen feels like careful service, and it puts the caller in control of what Bernard sees.

Real company: A real billing company fixes errors on its own side and never needs to view your screen.

Bernard Have a look? Well, it's in the back room and the table's covered in jigsaw. One piece went missing at Easter — the bit of blue sky. You'd think it would turn up.
Caller Never mind the table — the warning on your screen is the thing. If I can't get eyes on it, the fault spreads to everything else in the house that runs off the line.
Remote access requestUrgency or fear
Bernard Spread to what, the radio? Oh — well, now. Give me a moment, I'll just turn the thing off at the wall and we'll both have a rest. Hold on — did I leave the back step half-painted?
Caller I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →