Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #418 · 2026-10-22

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
4
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that comes with a phone number is not a warning, it is an advertisement, and the number belongs to the person selling it.

“The caller asked to be let in at the machine, and Bernard said he had never had anyone in before and asked whether it would want to stay the afternoon.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

remote door never opened, kettle won, caller quit mid-sentence · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing support, you've reached the right desk. I understand there's a warning showing on your screen — I'm looking at the alert now, and I can talk you through what it means.
Fake pop-up with phone numberFake authority or brand impersonation

Claiming to already see the alert makes the warning feel real and official, so the person trusts the caller's explanation.

Real company: A real company never calls about a pop-up and never claims to see your screen. You would contact them using a number you look up yourself.

Bernard Oh — is it a red one? I only ask because there's a blue box keeps coming up too, and I never know which to believe. Safebelt, did you say? That's a nice name for a firm. Are you warm enough where you're sitting?
Caller Safebelt — no, SafeNet Billing, sorry. And it doesn't matter which box is which colour, the one with our number on it is the serious one, and it won't sit there patiently forever.
Urgency or fearFake pop-up with phone number

A ticking clock stops people from pausing to check whether the warning is real.

Real company: A real security warning names the exact problem and never rushes you into calling a number on the screen.

Bernard Right, well, it'll have to sit a bit longer, the kettle's just going on. Do you take yours strong? I've a photograph here I've been meaning to tell someone about — my niece at the seaside, enormous hat on her.
Caller SafeNet Billing deals with the alert itself, not cups of anything, so let's keep to the screen. Then you can tell me about the photograph afterwards, I promise.
Fake authority or brand impersonation
Bernard Right, well, the thing on the screen will have to wait, there's a pan wanting my attention. You still there? You've gone quiet.
Caller Still here. The way we sort this out for you is to have a look at the machine from our end, so if you'd just let me in on it, I can get started.
Remote access requestFake authority or brand impersonation

Offering to fix the problem builds trust and makes handing over control feel like the helpful next step.

Real company: A real support team never asks to connect into your computer from an unexpected call. You call them, not the reverse.

Bernard In on it? In on the machine? Oh no, I don't think so, I've never had anyone in before. Would it want to stay for the afternoon? It'd have to get on with the bird.
Caller No one's coming round, it's all done down the line, quick as anything. So if you'd just open the door to it, so to speak, the screen will stop pestering you.
Remote access requestUrgency or fear
Bernard Down the line, is it? Well, that's clever. Only I've a letter here from the council I still haven't opened, and I've a feeling it's about the hedge. Would this take long?
Caller Forget it. I'm putting the phone down now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →