Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #408 · 2026-10-22

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that says call this number is the scam itself, so nothing on the screen needs fixing and nobody needs to see it.

“The caller wanted to see the screen and Bernard was still deciding whether the pot should go on.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

warning ignored, offer withdrawn, no look taken · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, support line, you're through to me. Now, the warning on your screen — I can see it from my end, and I need you to stay with me while we sort it out.
Fake pop-up with phone numberFake authority or brand impersonationUrgency or fear

Claiming to see the warning on your screen makes the caller seem to have inside knowledge, which builds trust fast.

Real company: A real company never cold-calls about a pop-up and never claims to see your screen. You would call them on a number you look up yourself.

Bernard SafeNet, is it? I've got a nephew in something like that. Now the warning's the thing — it's got a big yellow triangle on it. Do you know, that's the same yellow as the photograph of my sister on the sideboard.
Caller Yes, the yellow one, that's the one to worry about. It means something's got in, and it's moving fast — we need to deal with it while it's still on the screen, so please stay with me.
Urgency or fearFake scan or planted problems

A ticking clock and a scary warning stop the person from pausing to check whether any of it is real.

Real company: A real security team never rushes you off the phone. They tell you to close the window and contact them through official channels.

Bernard Oh, it'll keep. It's been up there a while — it's a photograph, that's what I'm trying to tell you. My sister at the seaside, holding her hat on with one hand.
Caller Look, that triangle is the official check — only our system puts that up, no one else. So it's our engineers who have to come in and clear it, and that's what I'm here for.
Fake authority or brand impersonationFake scan or planted problems
Bernard Your engineers. Right. And would they want a cup of something when they come? Only I'd put the pot on. Mind you, my nephew's in that line of work too, I think. Or is it his boy?
Caller No need to put anything on, they won't be coming to the house — they do it down the line. So if you just let me have a look at your screen from here, we can get it off your hands.
Remote access requestFake scan or planted problems

Offering to fix the problem remotely feels helpful and saves effort, so the target lowers their guard and hands over control.

Real company: A real security team never asks to view your screen from a cold call, and would tell you to contact them through official channels.

Bernard Down the line, is it. Oh — well — hold on, I've got the wireless on in the other room and it's chattering away. Let me just turn it down a tick.
Caller Never mind the wireless, this is rather more pressing — the longer that warning sits there, the more of your details it rummages through. All I want is a quick look from my end, nothing more.
Remote access requestUrgency or fear
Bernard Details, is it. Well, the screen's just been sitting there looking sorry for itself. I'd have to find my glasses before I could tell you anything about it.
Caller I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →