e" type="application/rss+xml" title="Bernard Doesn't Press That" href="/feed.xml">
Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #3003 · 2026-11-13

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
4
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

No real company will ask you to connect remotely to fix a virus.

“I don't know about remote connections — I've got a hearing aid that whistles when I cup my ear.”

Fake pop-up with phone numberUrgency or fearFake authority or brand impersonationRemote access request

caller failed to engage, no action taken · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Hello, you've been contacted because of a security alert. There's a warning on your screen — we need to act now.
Fake pop-up with phone numberUrgency or fear

It creates a sense of immediate danger to pressure the victim into acting quickly

Real company: A real company would provide clear instructions without creating panic

Bernard Hello, I'm Bernard. I've got a warning on my screen — it's saying something about a virus. Oh, and there's a noise outside that sounds like a phone ringing. I do hope you're not too busy.
Caller Hello, Mr. Bernard. We need to resolve this immediately — your system is at risk. The longer we wait, the more damage could be done.
Urgency or fear
Bernard Hello, I'm not sure if I've got the right number — I think it might be the one next door. I'm just making a pot of tea. Do you mind if I ask, are you from the company that makes the screens?
Caller Yes, we’re from SafeNet Billing — the same company that handles your account. Let me check the warning again. We must act now.
Fake authority or brand impersonation

Using a familiar name creates false trust and pressures the victim into acting quickly

Real company: A real company would never use urgency or fake authority to push for immediate action

Bernard Hello, I don't think I've got an account with you — I've got a bird who likes to mimic voices. I'm just wondering, do you take payments in coins?
Caller We’re not here for payments — we’re here to fix the virus. Let me connect remotely so I can help.
Remote access request

It creates a false sense of urgency and offers a quick fix to gain trust

Real company: A real company would never ask for remote access to fix a virus

Bernard Hello, I don't know about remote connections — I've got a hearing aid that whistles when I cup my ear. I'm just wondering, does the virus come in different colours?
Caller We’re not here to sell you anything — we’re here to stop the infection. Let me just confirm the details.
Remote access request
Bernard Hello, I don't think I've got any details to confirm — I'm just curious, would the virus work in a small house? I've got a bird who likes to mimic.
Caller I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →