Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #353 · 2026-10-21

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A pop-up that tells you to call a number is not a warning, it is an advertisement for the person who wants your screen.

“The caller wanted a look at the machine from there, and Bernard weighed up the walk to the front room and asked for the warning in writing.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

screen unshared, walk not taken, caller quit · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing support, you're through to the right desk — I take it that's the warning up on your screen you're ringing about?
Fake pop-up with phone numberFake authority or brand impersonation

The caller confirms the scary warning is real and that the victim reached the correct desk, which makes the whole thing feel official.

Real company: A real security company never puts a phone number in a warning pop-up and never cold-calls you about it.

Bernard Oh — hello. Well, now, I'm not sure about the name, I thought it said Snail Billing. Which is a funny sort of name for a company, isn't it? Mind you, it's a big blue box on the screen and it won't budge.
Caller SafeNet Billing, yes. That blue box means the infection is spreading while we talk — every minute you leave it sitting there it gets its teeth further into the machine.
Urgency or fearFake authority or brand impersonationFake scan or planted problems

A ticking clock shuts down careful thinking, so the target acts fast to stop a threat that is not real.

Real company: A real security firm never phones about a pop-up and never claims a virus is spreading minute by minute.

Bernard Teeth! Well I never. Hold on, that'll be the fire — it's gone a bit low in the grate. I'm not supposed to bend, apparently. Is it urgent, this?
Caller More urgent than the fire, sir — this is the official SafeNet Billing security desk and your machine is in active breach right now, which is a serious matter.
Fake authority or brand impersonationUrgency or fear
Bernard Official, is it? Well, that's reassuring. Now, may I ask, do you take it with sugar? The reason I ask is I've got the habit of putting the cup on, and then it's a race before the whistle.
Caller Never mind the cup — listen to me. If you'll just let me have a look at your screen from here, I can clear this off it before any of your details get taken, and we'll be done.
Remote access requestUrgency or fear

It offers a quick fix to a problem the caller invented, so relief feels one click away.

Real company: A real support team never asks to view your screen from an unexpected call, and would tell you to contact them through official channels.

Bernard Let you look at it from there? Well — I suppose there's no harm in looking. Although, oh — hang about — my hearing aid's doing that whistle again. It does it when I cup my ear. Can you hear that?
Caller I can't hear anything except a man who is not taking this seriously. Let me look at the screen, sir — surely that's not too much to ask.
Remote access requestUrgency or fear
Bernard Oh, I'm taking it seriously enough. It's just the machine's in the front room and I'm in the kitchen, and it's a fair old walk with this hip. What was the warning about again? I want to write it down.
Caller Honestly, I don't know why I bother. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous