e" type="application/rss+xml" title="Bernard Doesn't Press That" href="/feed.xml">
Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #2823 · 2026-11-12

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
4
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

No real company will ask you to install software to give you a refund.

“I'll send it in the post instead. Save us both the trouble. Goodbye.”

Fake pop-up with phone numberUrgency or fearFake authority or brand impersonationRemote access request

caller sent a letter, no access achieved · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Hello, you've been contacted because of a warning on your screen. We need to sort this out now.
Fake pop-up with phone number

It creates a false sense of urgency and legitimacy by mimicking a real warning message.

Real company: A real company would not use fake pop-ups to contact you directly.

Bernard Hello there, I do wonder how you're getting on. Oh — I do hate these warnings, don't you? I had one last week about my teapot, though that was just a trick by the postman. I think I've got my reading glasses on my head somewhere. What was the number again?
Caller We need to act quickly — this warning means your computer is at risk. If we don’t resolve it now, there could be serious consequences.
Urgency or fear

Creating a sense of urgency pressures victims into acting without thinking.

Real company: A real company would explain the situation calmly and provide clear steps to resolve it.

Bernard Oh dear, I do hope it's not too bad. I was just thinking about the milkman — he's been very cross lately, I'm afraid. I do wish I could see that warning. What did it say again?
Caller This is SafeNet Billing, and we’re here to help. The warning on your screen is official — we need to remove it immediately.
Fake authority or brand impersonation

Impersonating a known brand creates false trust and urgency to act

Real company: A real company would not use pop-ups to demand immediate action

Bernard Oh, I do love the sound of that name — Safenot Billing, was it? I think I'll have to get my slippers on. I was just making a pot of tea. Would you like some? I do hope you're not too busy.
Caller We don’t have time for tea. The warning is urgent — if we don’t fix it now, your data could be at risk.
Urgency or fearRemote access request

Creating a sense of urgency pressures victims into acting without thinking

Real company: A real company would explain the issue calmly and provide clear steps to resolve it

Bernard Oh, I do apologise — I'm ever so sorry. I was just thinking about my garden. Would you like to speak to the person who's been helping me with the roses? I think they're called... something with a 'B' in it.
Caller I’m afraid I can’t speak to anyone else. This is SafeNet Billing — we need to clear that warning now.
Fake authority or brand impersonationRemote access request
Bernard Oh, I do see — Safenot Billing, was it? I was just thinking about the roses. I must go and check on them. I'll be right back.
Caller I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →