Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #358 · 2026-10-22

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning on your screen is not proof anyone official is behind it. Real support will never ask to look inside your machine through the phone line.

“The caller said the red notice was their own doing and asked to look through the line, and Bernard thought his telephone had never worked that way.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

connection refused, warning unclaimed, caller rang off · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing support, you've reached the number on your screen — that warning that's showing, that's us, and it's about your machine.
Fake pop-up with phone numberFake authority or brand impersonation

The caller ties himself to the warning already on the screen, so the victim believes the alert and the voice are one trusted source.

Real company: A real security company does not staff a phone number printed in a browser warning, and does not call you about a pop-up.

Bernard Oh — well — now then. SafeBelt, did you say? There's a warning on the little screen, yes, ever such a bright red. Would you hold on a tick, I've a step out the back that wants painting before October and I've just spotted the tin.
Caller It's SafeNet, and don't go anywhere — that red warning means something's got into your machine as we speak. The longer it sits there, the further it travels.
Urgency or fearFake authority or brand impersonation

It creates panic about an invisible threat already inside, so the person reacts fast instead of checking.

Real company: A real security firm never cold-calls about a warning on your screen and never asks you to stay on the line.

Bernard Further it travels — does it? Like damp, that. We had damp travel right along the back wall one year. Is it a cream colour, the thing that got in? Only I'm asking because of the paint, you see.
Caller It's not a paint job, it's SafeNet Billing — we handle this warning, it's ours. Now, has the red notice changed at all since you first saw it?
Fake authority or brand impersonationFake pop-up with phone number
Bernard Changed? Oh — hold on. There's a bird on the shed roof giving me a look. Sorry, where were we. The red notice. It's still red, I think. Mind you, my glasses are somewhere in the hall.
Caller Forget the colour of it — that red thing on your screen is our doing, so it's safe to say it's rather urgent. Can you just let me have a look at the machine?
Remote access requestUrgency or fearFake scan or planted problems

It reframes the warning on screen as the caller's own doing, which makes the stranger seem like the one who can fix it.

Real company: A real support team never asks to look at your machine after an unsolicited call. You call them, not the reverse.

Bernard Let you have a look? Well — you're very welcome to come round, only the front path is uneven at the far end. Is it a long trip? I should get the good teapot out.
Caller No, not a visit — I'd look at it remotely, through the line, if you'd just allow me the connection. It's SafeNet's own secure way in, nothing for you to fuss about.
Remote access requestFake authority or brand impersonation
Bernard Through the line? The telephone line? Oh, I don't think that's how mine works — it's a little black one with buttons. Never mind. Is it warm where you are? You sound like you're in a call centre, they keep those cold.
Caller I'll get someone else to ring you. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →