Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #283 · 2026-10-21

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

15
Minutes wasted
6
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that arrives with its own phone number is not a warning, it is the invitation, and the number does not need your help.

“The caller asked for the run of the machine. Bernard gave him the run of the hall instead, and then the goodbye.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearUnsolicited contactRemote access requestFake scan or planted problems

access never granted, the caller talked himself out of a job · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, you've reached the number from the warning on your screen. Before anything else, I need you to keep looking at that message — it's still showing, isn't it?
Fake pop-up with phone numberFake authority or brand impersonation

Keeping the victim staring at the alarming message stops them from closing it or thinking clearly.

Real company: A real company never relies on a pop-up to start a call, and would not ask you to stay on a screen.

Bernard Oh — SafeBelt, is it? I'm looking, I'm looking, only my glasses are somewhere on the dresser and there's a letter from the council I never did open. What was the message about again?
Caller SafeNet, yes. It says the machine is infected and it's getting worse the longer it sits — the number on the screen is the only way to stop it, so your glasses can wait, honestly.
Urgency or fearFake pop-up with phone number

It makes waiting feel dangerous, so the person acts fast instead of checking with anyone.

Real company: A real security firm never treats a pop-up number as the only fix, and never rushes you off the phone.

Bernard Getting worse, you say. Well, mine's been a bit sluggish since the summer, I'll grant you. Is that a thing that spreads, like damp? Only the back step wants painting before winter and I'd hate for that to get ideas.
Caller SafeNet here — we were the ones the alert came through to, nobody else. That's why it has to be me you talk to about the screen.
Fake authority or brand impersonationUnsolicited contact

Claiming to be the only company that saw the alert makes Bernard feel he must deal with this caller and no one else.

Real company: A real security firm never phones from a pop-up and never claims to be your only contact. You can always call the number on your account.

Bernard Oh, I see, you're the only ones. Do you take tea while you're at it, or is it just the screen business? Only I've got the pan out anyway and it seems a shame to waste it.
Caller Tea's very kind but I'm not in the building, I'm on the line about your screen. Now, the warning will clear the moment I can see the machine for myself — so if you'd just let me in to look at it, that's the fright over with.
Remote access requestUrgency or fearUnsolicited contact

It pairs a soothing tone with a promise that the fear ends only if you hand over control.

Real company: A real support team never asks to connect to your computer from an unexpected call. You call them using a number you look up yourself.

Bernard Let you in — to the laptop, do you mean? Well now, that's a thought. It's in the front room and I'm in the hall, so you'd have to bear with me while I work out which room I'm standing in.
Caller No need to work anything out — it's the machine with the warning on it, wherever it's sitting. I just need the run of it for a moment, that's all this takes.
Remote access requestFake scan or planted problems

Asking for control of the machine sounds like a small, temporary favour, so the victim focuses on the warning rather than on handing over their computer.

Real company: A real software or security company never asks to take remote control of your device from an unexpected call.

Bernard The run of it. You make it sound like a garden. Listen, I'll say goodbye now, there's a good soul — and mind how you go, it's turning cold out there.
Caller Honestly, I don't know why I bother. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →