Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #313 · 2026-10-21

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that gives you a number to call is the trap, not the alarm. Real security never waits on you dialing in.

“The caller asked to look at the machine before damage was done, and Bernard asked whether he had eaten.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

the screen stayed red, the doorbell won, nobody looked at anything · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing here, you've reached the number from the warning on your screen. Before anything else, can you confirm you're looking at it right now?
Fake pop-up with phone numberFake authority or brand impersonation

It borrows the authority of a scary on-screen warning and treats the call as the natural next step, so the target feels they reached out rather than being cold-called.

Real company: A real security or billing team never relies on a pop-up phone number, and would point you to the number printed on your own account or card.

Bernard Oh — well — now, is that SafeNest? The milkman's called Bert and he's owed two pounds, so I've got that on my mind. But yes, there's a big red thing up on the little laptop. Is it meant to be red?
Caller It's not meant to be red, and that's rather the point. SafeNet Billing, not SafeNest — and that warning means the machine is in a bad way this very minute, so please keep your eyes on it.
Urgency or fearFake pop-up with phone number

It turns a small detail into proof of danger, so the listener stops checking and starts panicking.

Real company: A real security warning names the exact problem and tells you to close the window and contact them through their official number.

Bernard Right you are — that name. Well, it's very red, redder than the post office van. Hold on, one of my slippers has gone under the chair, the left one, I think. Give me a moment and I'll have a proper look.
Caller Forget the footwear for a second, this is SafeNet Billing, the people who certify these machines, and I need you looking at what's on the display. Can you see where it says to call?
Fake authority or brand impersonationFake pop-up with phone number
Bernard I can see a number with a great many nines in it. Are you lot certified, then, like the electrician? My nephew's an electrician. Anyway, it's a nice big bright thing, I'll grant you that.
Caller Certified and authorised, yes, and that's the number for us. That display means your machine is infected right now, so what I need is for you to let me have a look at it before any damage is done.
Remote access requestFake scan or planted problemsUrgency or fear

Claiming authority and an active infection at once makes the listener hand over control before they think to check.

Real company: A real support team never calls from a pop-up and never asks to look inside your machine uninvited.

Bernard Let you look at it — oh, I'd have to find my glasses first. Have you had your dinner? You sound like a man who hasn't had his dinner.
Caller That's kind, but never mind my dinner, this is SafeNet Billing and your machine is the one in trouble. I just need you to let me connect to it and take a look, that's all.
Remote access requestFake authority or brand impersonationUrgency or fear
Bernard Hang on a tick — there's somebody at the door, or there might be. Back in a moment.
Caller Forget it. I'm putting the phone down now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →