Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #43 · 2026-10-18

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

15
Minutes wasted
6
Red flags found
10
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning on your screen that comes with a phone number is bait, so don't call it and don't let anyone remote in.

“The caller asked twice for remote access and got a question about milk instead.”

Fake pop-up with phone numberUrgency or fearFake authority or brand impersonationFake scan or planted problemsUnsolicited contactRemote access request

nothing gained, one slipper lost · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, good afternoon. You're through about the warning on your screen — I can see it flagged up at your end, so let's get that sorted before it causes trouble.
Fake pop-up with phone numberUrgency or fearFake authority or brand impersonation

It treats the pop-up as already confirmed and adds a vague threat of trouble, so the person feels the problem is real and time-sensitive.

Real company: A real security or billing team never calls about a pop-up. They contact you through official channels you can verify yourself.

Bernard Oh — well — now, is that Safenet or Saffron? Only my niece works at a garden centre and they've a bedding range called Saffron, so I wondered. What was it you wanted sorted, dear?
Caller SafeNet, like safety. Look, that warning on your screen, if we don't deal with it soon the machine could lock up entirely, so I'll be quick.
Urgency or fearFake pop-up with phone number

A ticking clock stops people from pausing to check whether the warning is real.

Real company: A real security firm never cold-calls about a pop-up, and real warnings do not come with a deadline.

Bernard Lock up! Like the post office did on a Thursday, the whole street queuing in the rain. Hmm — what warning, sorry? I've been watching a programme about lighthouses, so the screen's been on that.
Caller The full-screen warning, the big red one — it's on your laptop, not the lighthouse thing. I'll be quick: I need you to confirm a few details so we can authorise the repair.
Fake authority or brand impersonationFake scan or planted problemsUnsolicited contact

A scary warning on the screen feels like proof of a problem, so the caller seems like the person fixing it.

Real company: A real software company never calls about a warning on your screen and never asks you to confirm details to authorise a repair.

Bernard Right you are. Now — I'm not one for red, it's a bit loud for a bungalow. Hold on, dear, my slipper's gone off under the chair and I can't reach it with my foot like I used to. Back in a tick.
Caller No need for the slipper, sir, this is rather time-sensitive. Shall we just get you back to the screen so I can sort that alert before it spreads?
Remote access requestUrgency or fear

Pushing to get back to the screen fast stops the person from pausing to check whether the caller is real.

Real company: A real support team never needs to take over your screen from a cold call, and will happily let you call back on a number you look up yourself.

Bernard Spreads? I had a damp patch spread like that once, and the man said it was the gutter. Now, would this be a thing Mavis could see? Only she's my parrot, and she doesn't care for red either.
Caller I couldn't say about the parrot — it's the computer we need to look at. If you'd just let me have a look at it remotely, I'll be quick and we can put the whole thing to bed.
Remote access requestUnsolicited contact

Offering to fix it quickly sounds helpful, so the person focuses on the problem instead of asking why a stranger needs control of their machine.

Real company: A real support team never takes remote control of your computer from an unexpected call. You contact them first through official channels.

Bernard Oh, I don't think the computer's the sort to be put anywhere. Remotely, you say — that's how I used to watch the lighthouse programme from the kitchen, with one of those long leads. Tea first, though. Do you take milk?

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →