Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #398 · 2026-10-22

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
4
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that arrives on your screen and hands you a number to ring is not a warning, it is an advert for the caller.

“The number on the warning was wanted, and Bernard offered the wedding photograph behind it.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

digits unread, account unmatched, caller gave up · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing support, you've reached the right desk — I understand there's a warning showing on your screen and you've done the sensible thing ringing in. Can you tell me what it says across the top?
Fake pop-up with phone numberFake authority or brand impersonation

A calm, official-sounding greeting rewards the person for calling and makes the warning feel already confirmed.

Real company: A real company does not rely on a pop-up phone number, and would point you to the number printed on your own bill or card.

Bernard Oh — hello there. Now, is that SafeNet or SatinNet? Only I've written it on the back of an envelope and my handwriting's a disgrace. And what is it I'm meant to be reading — the top of what, sorry?
Caller SafeNet, with an F, and it's the top of the message on your screen — the big red one. It does say your files are at risk, doesn't it? I'd rather we didn't leave it sitting there.
Urgency or fearFake pop-up with phone number

It points to something already on the screen and adds time pressure, so the target trusts the screen over their own doubt.

Real company: A real security firm never cold-calls about a pop-up. It waits for you to reach out through its official support page.

Bernard With an F, right you are. Well, the lass next door's wireless keeps going off and on, so it might just be that. Hold on — the little green light on this thing's gone orange, does that matter?
Caller An orange light is exactly the sort of thing the warning flags up, so I'd not ignore it. Is there a number showing on the warning itself? That's how I know I'm on the right account.
Fake authority or brand impersonationFake pop-up with phone number
Bernard A number, you say. Give me a moment, I'll put my specs on. Now — there's a photograph just behind it, my niece at a wedding, in a hat like a racing pigeon. Do you want me to tell you about it?
Caller No need for the photograph — I only want the number on the warning. Just the digits as they appear, and then we can get this settled.
Remote access requestFake pop-up with phone number

It makes a small, easy ask feel harmless, so the victim hands over a code without noticing what it unlocks.

Real company: A real software company never asks you to read out a code from a warning box to a stranger who called you.

Bernard Oh, the digits. Well, they're mostly nines, if that helps. Nine, nine, then a couple more, then my ear starts whistling when I cup it — do you hear that? That's the hearing aid, not you.
Caller I can't do much with mostly nines, sir. Is there another bit of the warning with a proper number on it, one I could match to your account?
Remote access requestFake pop-up with phone number
Bernard There's a little box at the bottom with something in it. Hang on, I'll tip the screen towards the window. Now then — what was it you said you were wanting matched?
Caller I'll ring you back another day. Bye now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →